Vulnerability record · CVE-2023-30207 · published 5 July 2023

CVE-2023-30207: Kodi divide by zero vulnerability

Kodi · Kodi

A divide by zero issue discovered in Kodi Home Theater Software 19.5 and earlier allows attackers to cause a denial of service via use of crafted mp3 file.

5.5 CVSS 3.1 Medium EPSS 0.33% · top 76.6% CWE-369 · Divide by zero

5.5CVSS 3.1 base score

0.33%EPSS exploitation probability, 30 days

NoNot in CISA KEV

1Affected product versions listed by NVD

8References, 2 tagged exploit

17 Jun 2026Last modified by NVD

Description

A divide by zero issue discovered in Kodi Home Theater Software 19.5 and earlier allows attackers to cause a denial of service via use of crafted mp3 file.

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Affected products

1 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

Kodi Kodi

References

Link	Tags
https://github.com/xbmc/xbmc/commit/dbc00c500f4c4830049cc040a61c439c580eea73	Patch
https://github.com/xbmc/xbmc/issues/22378	ExploitIssue TrackingThird Party Advisory
https://github.com/xbmc/xbmc/pull/22391	Patch
https://lists.debian.org/debian-lts-announce/2024/01/msg00009.html
https://github.com/xbmc/xbmc/commit/dbc00c500f4c4830049cc040a61c439c580eea73	Patch
https://github.com/xbmc/xbmc/issues/22378	ExploitIssue TrackingThird Party Advisory
https://github.com/xbmc/xbmc/pull/22391	Patch
https://lists.debian.org/debian-lts-announce/2024/01/msg00009.html

Track CVE-2023-30207 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

7.5CVE-2017-5982Kodi Chorus2 add-on directory traversal allows arbitrary file readThe Chorus2 2.4.2 add-on for Kodi contains a directory traversal flaw in its image path handling. A crafted encoded dot-dot-slash sequence lets a rem…EPSS 78%analysed28 Feb 2017 6.1CVE-2018-8831Kodi persistent XSS via playlist executes script in victim browserKodi through 17.6 contains a persistent cross-site scripting flaw in how it handles playlists, allowing arbitrary HTML or script to be stored and lat…EPSS 53%analysed18 Apr 2018 5.5CVE-2021-42917Kodi classic buffer overflow vulnerabilityBuffer overflow vulnerability in Kodi xbmc up to 19.0, allows attackers to cause a denial of service due to improper length of values passed to istre…EPSS 1.9%1 Nov 2021 5.5CVE-2017-8314Kodi path traversal vulnerabilityDirectory Traversal in Zip Extraction built-in function in Kodi 17.1 and earlier allows arbitrary file write on disk via a Zip file as subtitles.EPSS 2.5%23 May 2017 4.6CVE-2023-23082Kodi out-of-bounds write vulnerabilityA heap buffer overflow vulnerability in Kodi Home Theater Software up to 19.5 allows attackers to cause a denial of service due to an improper length…EPSS 0.68%3 Feb 2023

Source: NIST National Vulnerability Database (record CVE-2023-30207), CISA KEV, FIRST EPSS (scores of 2026-09-26). This page is refreshed as NVD updates the record.