CVE-2011-3625: Stack-based buffer overflow in the sub_read_line_sami function in subreader.c in MPlayer, as used in SMPlay...

Security readout for executives and security teams

A malicious SAMI subtitle file can crash affected MPlayer-based playback and may allow code execution. The business risk is mostly where users or automated media workflows open subtitles from untrusted sources. Public sources do not show CISA KEV listing or active exploitation evidence. Exposure is most likely on desktops, media review workstations, or file-processing systems that use affected MPlayer or SMPlayer components and open external SAMI subtitle files from email, web downloads, shared folders, or user uploads. Prioritize remediation where untrusted media or subtitles are handled. Risk is lower for systems that never process external subtitle files, but possible code execution makes exposed media workflows worth addressing. Mitigation focus: Identify MPlayer and SMPlayer installations, especially SMPlayer 0.6.9-era systems.; Apply vendor or distribution updates referenced by official advisories.; Restrict opening SAMI subtitle files from untrusted sources..

Prepared

Jun 14, 2026, 07:40 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.