Login Request a demo
GP
Product
GOM Player
by Gomlab · last CVE Dec 15, 2025
9
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Vulnerabilities9In the news0Timeline
Severity mix
Critical 1High 2Medium 0Low 0
Severity
All severities9Critical1High2Medium0Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add GOM Player to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2023-53874
9.8
0%
Dec 15
GOM Player 2.3.90.5360 Buffer Overflow via Equalizer Preset Name
Affected: 2.3.90.5360
CVE-2023-53875
8.8
0%
Dec 15
GOM Player 2.3.90.5360 Remote Code Execution via Insecure IE Component
Affected: 2.3.90.5360
CVE-2017-5881
7.8
8%
Feb 21
GOM Player 2.3.10.5266 allows remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via a crafted fpx file
Affected: 2.3.10.5266
CVE-2014-3899
–
2%
Aug 12
Gretech GOM Player 2.2.51.5149 and earlier allows remote attackers to cause a denial of service (launch outage) via a crafted image file
Affected: through 2.2.51.5149
CVE-2013-7184
–
2%
Jan 24
Gretech GOM Media Player 2.2.56.5158 and earlier allows remote attackers to cause a denial of service (memory corruption) via a crafted AVI file
Affected: through 2.2.56.5158
CVE-2013-5716
–
2%
Sep 9
Gretech GOM Media Player 2.2.53.5169 and possibly earlier allows remote attackers to cause a denial of service (application crash) via a crafted WAV file
Affected: through 2.2.53.5169; 2.0.6; 2.0.9; 2.0.11; 2.0.12; 2.1.1; +23 more
CVE-2013-5715
–
2%
Sep 9
Buffer overflow in Gretech GOM Media Player before 2.2.53.5169 has unspecified impact and attack vectors
Affected: through 2.1.50.5145; 2.0.6; 2.0.9; 2.0.11; 2.0.12; 2.1.1; +22 more
CVE-2011-5162
–
7%
Sep 15
Stack-based buffer overflow in GOM Player 2.1.33.5071 allows user-assisted remote attackers to execute arbitrary code via a .ASX file with a long URI in the "ref href" tag
Affected: 2.1.33.5071
CVE-2009-1497
–
7%
May 1
Stack-based buffer overflow in srt2smi.exe in Gretech Online Movie Player (GOM Player) 2.1.16.4635 allows remote attackers to cause a denial of service (crash) or execute…
Affected: 2.1.16
Showing 9