Denial of Service Vulnerability in rplay by rplay.org
CVE-2025-62672

5.3MEDIUM

Key Information:

Vendor

Boyns

Status
Rplay
Vendor
CVE Published:
19 October 2025

What is CVE-2025-62672?

The rplay media player version 3.3.2 has a vulnerability that allows attackers to exploit the memcpy function in the RPLAY_DATA case. When this vulnerability is triggered via malformed packet data, it can lead to a denial of service condition, causing the daemon to crash and potentially leading to unspecified additional impacts. This issue can be exploited without requiring authentication, making systems running rplay vulnerable to unexpected interruptions and disruptions.

Affected Version(s)

rplay 0 <= 3.3.2

References

https://www.openwall.com/lists/oss-security/2025/10/18/4
https://salsa.debian.org/alteholz/rplay
https://web.archive.org/web/20171109100411/http://rplay.d...

CVSS V3.1

Score:
5.3
Severity:
MEDIUM
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

JSON
.
CVE-2025-62672 : Denial of Service Vulnerability in rplay by rplay.org