MediaMonkey 4.1.23 contains a denial of service vulnerability that allows local attackers to crash the application by opening a specially crafted MP3 file containing a…

Code

The project this record applies to. Exploit listings stay in References.

No public source repository is identified for this product.

Timeline

Detection, updates, and resolution for this record.

1. Mar 21, 2026 · NIST NVD

   Detected

   MediaMonkey 4.1.23 contains a denial of service vulnerability that allows local attackers to crash the application by opening a specially crafted MP3 file containing an excessively long URL string. Attackers can create a malicious MP3 file with a buffer containing 4000 bytes of data appended to a URL, which causes the application to crash when the file is opened through the File > Open URL dialog.

2. Oct 7, 2026 · NIST NVD

   Updated

   MediaMonkey 4.1.23 contains a denial of service vulnerability that allows local attackers to crash the application by opening a specially crafted MP3 file containing an excessively long URL string. Attackers can create a malicious MP3 file with a buffer containing 4000 bytes of data appended to a URL, which causes the application to crash when the file is opened through the File > Open URL dialog.

Affected

• cpe ventismedia/mediamonkey4.1.23.1881

Sources

• CVE.orgVulnerability recordCVE-2019-25571

  Official CVE identifier

  cve.org
• NIST NVDVulnerability recordCVE-2019-25571

  MediaMonkey 4.1.23 contains a denial of service vulnerability that allows local attackers to crash the application by opening a specially crafted MP3 file containing an excessively long URL string. Attackers can create a malicious MP3 file with a buffer containing 4000 bytes of d

  nvd.nist.gov

References

• Exploit · exploit-db.com
• Product · mediamonkey.com
• Product · mediamonkey.com
• Third Party Advisory · vulncheck.com