Related Vulnerabilities: CVE-2021-30145  

A security issue was found in mpv before version 0.33.1. An unverified format string, provided by the user as part of mf:// URI, could result in undefined behavior or a buffer overflow.

Severity Medium

Remote No

Type Arbitrary code execution

Description

A security issue was found in mpv before version 0.33.1. An unverified format string, provided by the user as part of mf:// URI, could result in undefined behavior or a buffer overflow.

AVG-1821 mpv 1:0.33.0-4 1:0.33.1-1 Medium Fixed

https://devel0pment.de/?p=2217
https://github.com/mpv-player/mpv/commit/cb3fa04bcb2ba9e0d25788480359157208c13e0b