GOM Player vulnerabilities

2 known vulnerabilities in GOM Player from Gomlab. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.8 High severity

  GOM Player: Cleartext Transmission of Sensitive Information

  CVE-2023-53875Dec 15, 2025Gomlab

  GOM Player 2.3.90.5360 contains a remote code execution vulnerability in its Internet Explorer component that allows attackers to execute arbitrary code through DNS spoofing. Attackers can redirect victims using a malicious URL shortcut and WebDAV technique to

• 9.8 Critical severity

  GOM Player: Buffer Copy without Checking Size of Input

  CVE-2023-53874Dec 15, 2025Gomlab

  GOM Player 2.3.90.5360 contains a buffer overflow vulnerability in the equalizer preset name input field that allows attackers to crash the application. Attackers can overwrite the preset name with 260 'A' characters to trigger a buffer overflow and cause appl