Buffer overflow in VUPlayer 2.49 and earlier allows user-assisted attackers to execute arbitrary code via a long URL in a File line in a .pls file, as demonstrated by an http URL on a File1 line.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.057
EPSS Ranking 90.1%