# mplayer 2:1.3.0-7ubuntu0.2: mplayer 2:1.3.0-7ubuntu0.2 for Ubuntu 18.04.6 LTS (bionic)

mplayer 2:1.3.0-7ubuntu0.2, released September 15, 2022, fixes 10 CVEs in mplayer. None of them is reported as exploited. Patch Radar priority: Routine. The product is no longer supported.

- Web page: https://patchblox.com/security/fix/linux/ubuntu-bionic-mplayer-2-1.3.0-7ubuntu0.2
- Platform: Linux
- Released: Sep 15, 2022
- Priority: Routine (Closes 10 CVEs, none high severity)
- CVEs: 10, exploited: 0, on CISA KEV: 0

## Applies to

| Product | Release | Fixed in |
|---|---|---|
| [mplayer](https://patchblox.com/security/data/product/linux/mplayer.md) | Ubuntu 18.04.6 LTS (bionic) | 2:1.3.0-7ubuntu0.2 |

## CVEs this fix closes

| CVE | Priority | Title | CVSS | EPSS | Exploitation |
|---|---|---|---:|---:|---|
| [CVE-2022-38855](https://patchblox.com/security/data/cve/CVE-2022-38855.md) | Routine | mplayer: Certain The MPlayer Project products are vulnerable to Buffer Overflow via function gen_sh_video () of mplayer/libmpd... | 5.5 | 0.0037 |  |
| [CVE-2022-38858](https://patchblox.com/security/data/cve/CVE-2022-38858.md) | Routine | mplayer: Certain The MPlayer Project products are vulnerable to Buffer Overflow via function mov_build_index() of libmpdemux/d... | 5.5 | 0.0037 |  |
| [CVE-2022-38863](https://patchblox.com/security/data/cve/CVE-2022-38863.md) | Routine | mplayer: Certain The MPlayer Project products are vulnerable to Buffer Overflow via function mp_getbits() of libmpdemux/mpeg_h... | 5.5 | 0.0037 |  |
| [CVE-2022-38864](https://patchblox.com/security/data/cve/CVE-2022-38864.md) | Routine | mplayer: Certain The MPlayer Project products are vulnerable to Buffer Overflow via the function mp_unescape03() of libmpdemux... | 5.5 | 0.0037 |  |
| [CVE-2022-38850](https://patchblox.com/security/data/cve/CVE-2022-38850.md) | Routine | mplayer: The MPlayer Project mencoder SVN-r38374-13.0.1 is vulnerable to Divide By Zero via the function config () of llibmpco... | 5.5 | 0.0034 |  |
| [CVE-2022-38851](https://patchblox.com/security/data/cve/CVE-2022-38851.md) | Routine | mplayer: Certain The MPlayer Project products are vulnerable to Out-of-bounds Read via function read_meta_record() of mplayer/... | 5.5 | 0.0034 |  |
| [CVE-2022-38860](https://patchblox.com/security/data/cve/CVE-2022-38860.md) | Routine | mplayer: Certain The MPlayer Project products are vulnerable to Divide By Zero via function demux_open_avi() of libmpdemux/dem... | 5.5 | 0.0034 |  |
| [CVE-2022-38861](https://patchblox.com/security/data/cve/CVE-2022-38861.md) | Routine | mplayer: The MPlayer Project mplayer SVN-r38374-13.0.1 is vulnerable to memory corruption via function free_mp_image() of libm... | 5.5 | 0.0034 |  |
| [CVE-2022-38865](https://patchblox.com/security/data/cve/CVE-2022-38865.md) | Routine | mplayer: Certain The MPlayer Project products are vulnerable to Divide By Zero via the function demux_avi_read_packet of libmp... | 5.5 | 0.0034 |  |
| [CVE-2022-38866](https://patchblox.com/security/data/cve/CVE-2022-38866.md) | Routine | mplayer: Certain The MPlayer Project products are vulnerable to Buffer Overflow via read_avi_header() of libmpdemux/aviheader.c | 5.5 | 0.0031 |  |

---

Data as of 2026-11-11T19:49:26Z UTC. Source: Patchblox Patch Radar (https://patchblox.com/security/patch-radar). Patchblox finds out-of-date software on Windows, macOS and Linux and updates it through release rings: https://patchblox.com/demo

Free to use with attribution: show "Data: Patchblox Patch Radar" with a link to https://patchblox.com/security/patch-radar. Terms, including what needs a written agreement: https://patchblox.com/security/patch-radar/use-the-data

Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.