Musicplayerdaemon

4 CVEs across 1 Musicplayerdaemon products. Browse Musicplayerdaemon vulnerabilities, severities, and proof-of-concept exploits.

Musicplayerdaemon products with known CVEs

ProductCVEs
Mpd4
Musicplayerdaemon CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2026-49130Medium5.32026-05-28Music Player Daemon (MPD) before version 0.24.11 contains a CRLF injection vulnerability in the xspf_char_data function within the XSPF playlist plugin that al…
CVE-2026-49129Medium5.82026-05-28Music Player Daemon (MPD) before version 0.24.11 contains a server-side request forgery vulnerability in CurlInputPlugin where CURLOPT_FOLLOWLOCATION is set wi…
CVE-2026-49128High7.52026-05-28Music Player Daemon (MPD) before version 0.24.11 contains a path traversal vulnerability in LocalStorage::MapFSOrThrow and LocalStorage::MapUTF8 within the loc…
CVE-2026-49127High8.62026-05-28Music Player Daemon (MPD) before version 0.24.11 contains a stack buffer overflow vulnerability in the pcm_unpack_24be function in src/pcm/Pack.cxx that allows…