Repository navigation
Security: yuroyami/KitePlayer
Security
No security policy detected
This project has not set up a SECURITY.md file yet.
-
A volume or mute change that races close can write into a freed audio ring on AppleGHSA-cx7x-6262-7xmr published
Oct 2, 2026 by yuroyamiLow -
kiteplayer-libass links libass 0.17.4, whose out-of-bounds write is fixed in 0.17.5GHSA-6j89-w8rc-8gp6 published
Oct 2, 2026 by yuroyamiHigh -
A crafted font attachment makes the libass driver read before its buffer on 32-bit targetsGHSA-vm2r-3fvx-92hw published
Oct 2, 2026 by yuroyamiLow -
DashUrlPolicy.SameOrigin is bypassed by redirects, and no option refuses private addressesGHSA-pqrx-f934-hh4w published
Oct 2, 2026 by yuroyamiModerate -
An external subtitle on another host receives the video item's headers, Authorization includedGHSA-x8vr-x3hp-r7g5 published
Oct 2, 2026 by yuroyamiModerate -
A media file with an extreme sample rate makes the default resampler throw or allocate about 405 MB per packetGHSA-fv69-5v98-w3qg published
Oct 2, 2026 by yuroyamiModerate -
A subtitle file can make the player allocate subtitle bitmaps without limit and end the appGHSA-89f5-vqwj-6c5j published
Oct 2, 2026 by yuroyamiModerate -
One long line in an external SubRip or WebVTT file freezes the player for minutesGHSA-rjxg-gp9v-vx7j published
Oct 2, 2026 by yuroyamiModerate -
A DASH manifest of a few hundred bytes makes the segment plan allocate without limitGHSA-4q5f-jx8c-9qrp published
Oct 2, 2026 by yuroyamiModerate -
A crafted DASH manifest makes the XML parser take quadratic time and hang the openGHSA-pr9m-gh7j-mvvv published
Oct 2, 2026 by yuroyamiModerate
Learn more about advisories related to yuroyami/KitePlayer in the GitHub Advisory Database