An issue in Clementine v.1.3.1 allows a local attacker to execute arbitrary code via a crafted DLL file.
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2024-50986.json"