| Package | Affected versions | Patched versions |
|---|---|---|
| music player daemon | < 0.23.8 | 0.23.8 |
In MPD before 0.23.8, as used on Automotive Grade Linux and other platforms, the PipeWire output plugin mishandles a Drain call in certain situations involving truncated files. Eventually there is an assertion failure in libmpdclient because libqtappfw passes in a NULL pointer.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free