Mediamonkey vulnerabilities

🔔 Create alert RSS

Published CVEs affecting Mediamonkey products: 1 record(s), with severity, exploitation and fixes.

Exploited only (KEV) →

CVE-2019-25571 Medium · 5.5 CWE-226 Mar 21, 2026

MediaMonkey 4.1.23 Denial of Service via Malformed URL

MediaMonkey 4.1.23 contains a denial of service vulnerability that allows local attackers to crash the application by opening a specially crafted MP3 file containing an excessively long URL string. Attackers can create a malicious MP3 file with a buffer containing 4000 bytes of data appended to a URL, which causes the application to crash when the file is opened through the File > Open URL dialog.