CyberSecBulletin

Gomlab vulnerabilities

We track 2 vulnerabilities in Gomlab products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on December 15, 2025.

2vulnerabilities
1critical
1high
0exploited
9.3average CVSS score

Latest Gomlab vulnerabilities

  • 8.8 High severity

    GOM Player: Cleartext Transmission of Sensitive Information

    CVE-2023-53875Gomlab

    GOM Player 2.3.90.5360 contains a remote code execution vulnerability in its Internet Explorer component that allows attackers to execute arbitrary code through DNS spoofing. Attackers can redirect victims using a malicious URL shortcut and WebDAV technique to

  • 9.8 Critical severity

    GOM Player: Buffer Copy without Checking Size of Input

    CVE-2023-53874Gomlab

    GOM Player 2.3.90.5360 contains a buffer overflow vulnerability in the equalizer preset name input field that allows attackers to crash the application. Attackers can overwrite the preset name with 260 'A' characters to trigger a buffer overflow and cause appl