In MPD before 0.23.8, as used on Automotive Grade Linux and other platforms, the PipeWire output plugin mishandles a Drain call in certain situations involving truncated files. Eventually there is an assertion failure in libmpdclient because libqtappfw passes in a NULL pointer.
References
Configurations
Configuration 1 (hide)
| AND |
|
History
13 May 2026, 20:00
| Type | Values Removed | Values Added |
|---|---|---|
| First Time |
Musicpd music Player Daemon
Musicpd |
|
| CPE | cpe:2.3:a:musicpd:music_player_daemon:*:*:*:*:*:*:*:* cpe:2.3:o:linuxfoundation:automotive_grade_linux:-:*:*:*:*:*:*:* |
21 Nov 2024, 07:33
| Type | Values Removed | Values Added |
|---|---|---|
| References | () https://gerrit.automotivelinux.org/gerrit/c/src/libqtappfw/+/28484 - Patch | |
| References | () https://gerrit.automotivelinux.org/gerrit/c/src/libqtappfw/+/28485 - Patch | |
| References | () https://gerrit.automotivelinux.org/gerrit/q/project:src%252Flibqtappfw+status:open - Not Applicable | |
| References | () https://jira.automotivelinux.org/browse/SPEC-4661 - Exploit |
08 Aug 2023, 14:22
| Type | Values Removed | Values Added |
|---|---|---|
| CWE | CWE-617 |
Information
Published : 2023-02-26 23:15
Updated : 2026-05-13 20:00
NVD link : CVE-2022-48363
Mitre link : CVE-2022-48363
CVE.ORG link : CVE-2022-48363
JSON object : View
Products Affected
linuxfoundation
- automotive_grade_linux
musicpd
- music_player_daemon
CWE
CWE-617
Reachable Assertion