CyberSecBulletin

Musicpd vulnerabilities

We track 1 vulnerability in Musicpd products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on February 26, 2023.

1vulnerabilities
0critical
1high
0exploited
7.5average CVSS score

Latest Musicpd vulnerabilities

  • 7.5 High severity

    Music Player Daemon: Reachable Assertion

    CVE-2022-48363MusicpdEPSS 1.17%

    In MPD before 0.23.8, as used on Automotive Grade Linux and other platforms, the PipeWire output plugin mishandles a Drain call in certain situations involving truncated files. Eventually there is an assertion failure in libmpdclient because libqtappfw passes