CVE-2023-30207
MEDIUMKodi < 19.5 - Denial of Service via Crafted MP3 File
Title source: llmDescription
A divide by zero issue discovered in Kodi Home Theater Software 19.5 and earlier allows attackers to cause a denial of service via use of crafted mp3 file.
References (4)
Core 4
Core References
Exploit, Issue Tracking, Third Party Advisory
https://github.com/xbmc/xbmc/issues/22378
Mailing List mailing-list
https://lists.debian.org/debian-lts-announce/2024/01/msg00009.html
Scores
CVSS v3
5.5
EPSS
0.0031
EPSS Percentile
21.9%
Attack Vector
LOCAL
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Details
CWE
CWE-369
Status
published
Products (1)
kodi/kodi
< 19.5
Published
Jul 05, 2023
Tracked Since
Feb 18, 2026