{"id":"CVE-2020-26664","aliases":["ALPINE-CVE-2020-26664","DEBIAN-CVE-2020-26664","DLA-3050-1","DSA-4834-1","EUVD-2020-19206","GHSA-fv8f-3437-pw9x","UBUNTU-CVE-2020-26664","openSUSE-SU-2021:0076-1","openSUSE-SU-2021:0091-1","openSUSE-SU-2021:0121-1","openSUSE-SU-2021:0122-1","openSUSE-SU-2021:0691-1","openSUSE-SU-2021:0714-1","openSUSE-SU-2024:11502-1"],"status":"published","title":"A vulnerability in EbmlTypeDispatcher::send in VideoLAN VLC media player 3.0.11 allows attackers...","description":"A vulnerability in EbmlTypeDispatcher::send in VideoLAN VLC media player 3.0.11 allows attackers to trigger a heap-based buffer overflow via a crafted .mkv file.","severity":{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-11","score":0.01497,"percentile":0.7456,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-787"],"published":"2021-01-08T17:40:41Z","modified":"2026-11-03T06:32:24Z","fixes":[{"ecosystem":"Alpine:v3.12","package":"vlc","fixed_in":["3.0.12-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.13","package":"vlc","fixed_in":["3.0.12-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.14","package":"vlc","fixed_in":["3.0.12-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.15","package":"vlc","fixed_in":["3.0.12-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.16","package":"vlc","fixed_in":["3.0.12-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.17","package":"vlc","fixed_in":["3.0.12-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.18","package":"vlc","fixed_in":["3.0.12-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.19","package":"vlc","fixed_in":["3.0.12-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.20","package":"vlc","fixed_in":["3.0.12-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.21","package":"vlc","fixed_in":["3.0.12-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.22","package":"vlc","fixed_in":["3.0.12-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.23","package":"vlc","fixed_in":["3.0.12-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.24","package":"vlc","fixed_in":["3.0.12-r0"],"sources":["osv"]},{"ecosystem":"Debian:12","package":"vlc","fixed_in":["3.0.12-1"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"vlc","fixed_in":["3.0.12-1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"vlc","fixed_in":["3.0.12-1"],"sources":["osv"]},{"ecosystem":"Debian:9","package":"vlc","fixed_in":["3.0.12-0+deb9u1"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap 15.2","package":"vlc","fixed_in":["3.0.13-lp152.2.12.1"],"sources":["osv"]},{"ecosystem":"SUSE:Package Hub 15 SP2","package":"vlc","fixed_in":["3.0.13-bp152.2.12.1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Alpine:v3.12","package":"vlc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.12-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.13","package":"vlc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.12-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.14","package":"vlc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.12-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.15","package":"vlc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.12-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.16","package":"vlc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.12-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.17","package":"vlc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.12-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.18","package":"vlc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.12-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.19","package":"vlc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.12-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.20","package":"vlc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.12-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.21","package":"vlc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.12-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.22","package":"vlc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.12-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.23","package":"vlc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.12-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.24","package":"vlc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.12-r0"}]}]},{"source":"osv","ecosystem":"Debian:12","package":"vlc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.12-1"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"vlc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.12-1"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"vlc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.12-1"}]}]},{"source":"osv","ecosystem":"Debian:9","package":"vlc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.12-0+deb9u1"}]}],"versions":["2.2.6-1","2.2.6-1~deb9u1","2.2.6-2","2.2.6-3","2.2.6-4","2.2.6-5","2.2.6-6","2.2.7-1","2.2.7-1~deb8u1","2.2.7-1~deb9u1","2.2.8-1","2.2.8-2","3.0.0-1","3.0.0~rc1-1","3.0.0~rc1~20171206-1","3.0.0~rc1~20171210-1","3.0.0~rc1~20171210-2","3.0.0~rc2-1","3.0.0~rc2-2","3.0.0~rc4-1","3.0.0~rc4-2","3.0.0~rc4-3","3.0.0~rc5-1","3.0.0~rc6-1","3.0.0~rc7-1","3.0.0~rc7-2","3.0.0~rc8-1","3.0.1-1","3.0.1-2","3.0.1-3","3.0.10-0+deb9u1","3.0.10-1","3.0.10-2","3.0.11-0+deb9u1","3.0.11-0+deb9u2","3.0.11-1","3.0.11-2","3.0.11-3","3.0.11-3~exp1","3.0.11-3~exp2","3.0.11-4","3.0.11.1-1","3.0.11.1-2","3.0.11.1-3","3.0.2-0+deb9u1","3.0.2-1","3.0.2-1+0.riscv64.1","3.0.2-1+0.riscv64.2","3.0.3-1","3.0.3-1+0.riscv64.1","3.0.3-1+b1+0.riscv64.1","3.0.3-1-0+deb9u1","3.0.3-1-1","3.0.3-1-2","3.0.3-1-3","3.0.3-1-4","3.0.3-2","3.0.4-1","3.0.4-2","3.0.4-3","3.0.4-4","3.0.5-1","3.0.5-2","3.0.6-0+deb9u1","3.0.6-1","3.0.7-0+deb9u1","3.0.7-1","3.0.7.1-1","3.0.7.1-2","3.0.7.1-3","3.0.8-0+deb9u1","3.0.8-1","3.0.8-2","3.0.8-3","3.0.8-4","3.0.9.2-1"]},{"source":"osv","ecosystem":"Debian:10","package":"vlc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.12-0+deb10u1"}]}],"versions":["3.0.10-0+deb10u1","3.0.10-1","3.0.10-2","3.0.11-0+deb10u1","3.0.11-1","3.0.11-2","3.0.11-3","3.0.11-3~exp1","3.0.11-3~exp2","3.0.11-4","3.0.11.1-1","3.0.11.1-2","3.0.11.1-3","3.0.7-1","3.0.7.1-1","3.0.7.1-2","3.0.7.1-3","3.0.8-0+deb10u1","3.0.8-1","3.0.8-2","3.0.8-3","3.0.8-4","3.0.9.2-1"],"bundled":5},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"vlc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2.2.1-3","2.2.1-5","2.2.2-1","2.2.2-2","2.2.2-3","2.2.2-3build1","2.2.2-4","2.2.2-5","2.2.2-5ubuntu0.16.04.1","2.2.2-5ubuntu0.16.04.2","2.2.2-5ubuntu0.16.04.3","2.2.2-5ubuntu0.16.04.4","2.2.2-5ubuntu0.16.04.5+esm1","2.2.2-5ubuntu0.16.04.5+esm2","2.2.2-5ubuntu0.16.04.5+esm3","2.2.2-5ubuntu0.16.04.5+esm4"]},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"vlc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2.2.6-6","2.2.6-6build1","2.2.7-1","2.2.8-1","2.2.8-1ubuntu4","2.2.8-2","3.0.0~rc1-1ubuntu1","3.0.0~rc1-1ubuntu3","3.0.0~rc2-1ubuntu1","3.0.0~rc2-2ubuntu1","3.0.0~rc2-2ubuntu2","3.0.0~rc4-1ubuntu1","3.0.0~rc7-2ubuntu1","3.0.0~rc8-1ubuntu1","3.0.0-1ubuntu1","3.0.1-1ubuntu5","3.0.1-2ubuntu1","3.0.1-2ubuntu2","3.0.1-3","3.0.1-3build1","3.0.2-0ubuntu0.1","3.0.3-1-1ubuntu1","3.0.4-1ubuntu0.2","3.0.7.1-0ubuntu18.04.1","3.0.8-0ubuntu18.04.1","3.0.8-0ubuntu18.04.1+esm1","3.0.8-0ubuntu18.04.1+esm2","3.0.8-0ubuntu18.04.1+esm3"]},{"source":"osv","ecosystem":"Ubuntu:Pro:20.04:LTS","package":"vlc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["3.0.8-2","3.0.8-2build1","3.0.8-3","3.0.8-3build1","3.0.8-3build2","3.0.8-3build4","3.0.8-4","3.0.9.2-1","3.0.9.2-1ubuntu0.1~esm1","3.0.9.2-1ubuntu0.1~esm2","3.0.9.2-1ubuntu0.1~esm3"]},{"source":"osv","ecosystem":"openSUSE:Leap 15.1","package":"vlc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.11.1-lp151.6.12.1"}]}],"bundled":2},{"source":"osv","ecosystem":"openSUSE:Leap 15.2","package":"vlc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.11.1-lp152.2.9.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Package Hub 15 SP1","package":"vlc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.11.1-bp151.5.12.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Package Hub 15 SP2","package":"vlc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.11.1-bp152.2.9.1"}]}],"bundled":2},{"source":"osv","ecosystem":"openSUSE:Leap 15.2","package":"vlc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.13-lp152.2.12.1"}]}]},{"source":"osv","ecosystem":"SUSE:Package Hub 15 SP2","package":"vlc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.13-bp152.2.12.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"vlc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.16-1.5"}]}],"bundled":17}],"products":[{"vendor":"debian","product":"debian_linux"},{"vendor":"videolan","product":"vlc_media_player"}],"references":[{"url":"https://gist.githubusercontent.com/henices/db11664dd45b9f322f8514d182aef5ea/raw/d56940c8bf211992bf4f3309a85bb2b69383e511/CVE-2020-26664.txt","tags":["x_refsource_MISC","x_transferred","Exploit","Third Party Advisory","evidence","report"]},{"url":"https://www.debian.org/security/2021/dsa-4834","tags":["vendor-advisory","x_refsource_DEBIAN","x_transferred","Third Party Advisory","advisory"]},{"url":"https://security.gentoo.org/glsa/202101-37","tags":["vendor-advisory","x_refsource_GENTOO","x_transferred","Third Party Advisory","advisory"]},{"url":"https://lists.debian.org/debian-lts-announce/2022/06/msg00012.html","tags":["mailing-list","x_refsource_MLIST","x_transferred","Mailing List","Third Party Advisory","advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-26664"},{"url":"http://videolan.com","tags":["report"]},{"url":"http://vlc.com","tags":["report"]},{"url":"https://github.com/advisories/GHSA-fv8f-3437-pw9x"},{"url":"https://security.alpinelinux.org/vuln/CVE-2020-26664","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2020-26664","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2020-26664","tags":["report"]},{"url":"https://code.videolan.org/videolan/vlc-3.0/-/commit/ec1f55ee9ace5cc675395a1bc9700d99679e7e8c","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2020-26664","tags":["report"]},{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/OD6C4CTIQTZF237437FPGD5AIRV33TET/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1133290","tags":["report"]},{"url":"https://bugzilla.suse.com/1172727","tags":["report"]},{"url":"https://bugzilla.suse.com/1180755","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2020-13428","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-26664","tags":["web"]},{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/KIZQCEFFNAB3CPF433JKRUT3ZM2EDM33/","tags":["advisory"]},{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/IYGQU4F6PPW4XHK4LTESKSQ2CPHZS3QW/","tags":["advisory"]},{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/YJCT5WYFJXXNRF5NSC7LOIHN7BD5UKVV/","tags":["advisory"]},{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/6NFAANEHTTDAXZIGCXPSKGYDFZDQ3HMF/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1181918","tags":["report"]},{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/EXHKDVKJAYUS66PEMKU2REXIBZDZ6GFW/","tags":["advisory"]},{"url":"","tags":["advisory"]},{"url":"https://www.suse.com/security/cve/CVE-2017-10699","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-9300","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-19857","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-13602","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-13962","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-14437","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-14498","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-14533","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-14534","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-14535","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-14776","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-14777","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-14970","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-5439","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-5460","tags":["web"]}],"sources":{"cve":[{"id":"CVE-2020-26664","description":"A vulnerability in EbmlTypeDispatcher::send in VideoLAN VLC media player 3.0.11 allows attackers to trigger a heap-based buffer overflow via a crafted .mkv file.","status":"published","published":"2021-01-08T17:40:41Z","modified":"2026-10-08T21:13:47.791Z","updated_at":"2026-11-02T14:35:45.763329Z"}],"euvd":[{"id":"EUVD-2020-19206","description":"A vulnerability in EbmlTypeDispatcher::send in VideoLAN VLC media player 3.0.11 allows attackers to trigger a heap-based buffer overflow via a crafted .mkv file.","status":"published","published":"2021-01-08T17:40:41Z","modified":"2026-10-08T21:13:47Z","updated_at":"2026-11-02T17:27:26.856493Z"}],"ghsa":[{"id":"GHSA-fv8f-3437-pw9x","title":"A vulnerability in EbmlTypeDispatcher::send in VideoLAN VLC media player 3.0.11 allows attackers...","description":"A vulnerability in EbmlTypeDispatcher::send in VideoLAN VLC media player 3.0.11 allows attackers to trigger a heap-based buffer overflow via a crafted .mkv file.","status":"published","published":"2022-05-24T17:38:20Z","modified":"2023-01-27T05:03:00Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"cwes":["CWE-787"],"updated_at":"2026-11-02T14:42:09.126228Z"}],"nvd":[{"id":"CVE-2020-26664","description":"A vulnerability in EbmlTypeDispatcher::send in VideoLAN VLC media player 3.0.11 allows attackers to trigger a heap-based buffer overflow via a crafted .mkv file.","status":"published","published":"2021-01-08T18:15:13.403Z","modified":"2026-10-08T22:16:59.12Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high","assessor":"primary"},{"version":"2.0","score":6.8,"vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","level":"medium","assessor":"primary"}],"cwes":["CWE-787"],"updated_at":"2026-11-02T14:06:28.892872Z"}],"osv":[{"id":"ALPINE-CVE-2020-26664","description":"A vulnerability in EbmlTypeDispatcher::send in VideoLAN VLC media player 3.0.11 allows attackers to trigger a heap-based buffer overflow via a crafted .mkv file.","status":"published","published":"2021-01-08T18:15:13.403Z","modified":"2026-11-03T06:32:24.965895376Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-03T07:17:57.723967Z"},{"id":"CVE-2020-26664","description":"A vulnerability in EbmlTypeDispatcher::send in VideoLAN VLC media player 3.0.11 allows attackers to trigger a heap-based buffer overflow via a crafted .mkv file.","status":"published","published":"2021-01-08T18:15:13.403Z","modified":"2026-10-24T10:30:23.251361792Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:44:16.248747Z"},{"id":"DEBIAN-CVE-2020-26664","description":"A vulnerability in EbmlTypeDispatcher::send in VideoLAN VLC media player 3.0.11 allows attackers to trigger a heap-based buffer overflow via a crafted .mkv file.","status":"published","published":"2021-01-08T18:15:13.403Z","modified":"2026-10-26T12:02:41.241586809Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:45:33.729655Z"},{"id":"UBUNTU-CVE-2020-26664","description":"A vulnerability in EbmlTypeDispatcher::send in VideoLAN VLC media player 3.0.11 allows attackers to trigger a heap-based buffer overflow via a crafted .mkv file.","status":"published","published":"2021-01-08T18:15:00Z","modified":"2026-04-22T12:35:54.639127Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:54:24.541803Z"},{"id":"DLA-3050-1","title":"vlc - security update","status":"published","published":"2022-06-10T00:00:00Z","modified":"2026-03-09T01:22:23.919313Z","updated_at":"2026-11-02T15:46:11.189256Z"},{"id":"DSA-4834-1","title":"vlc - security update","status":"published","published":"2021-01-22T00:00:00Z","modified":"2026-03-09T02:08:28.994944Z","updated_at":"2026-11-02T15:46:17.19998Z"},{"id":"openSUSE-SU-2021:0076-1","title":"Security update for vlc","description":"This update for vlc fixes the following issues:\n\nUpdate to 3.0.11.1:\n    \n- CVE-2020-13428: Fixed heap-based buffer overflow in the hxxx_AnnexB_to_xVC () (boo#1172727)\n- CVE-2020-26664: Fixed heap-based buffer overflow in EbmlTypeDispatcher:send () (boo#1180755)\n","status":"published","published":"2021-01-16T10:06:30Z","modified":"2026-02-04T03:14:29.566639Z","updated_at":"2026-11-02T16:58:31.879684Z"},{"id":"openSUSE-SU-2021:0091-1","title":"Security update for vlc","description":"This update for vlc fixes the following issues:\n\nUpdate to 3.0.11.1:\n    \n- CVE-2020-13428: Fixed heap-based buffer overflow in the hxxx_AnnexB_to_xVC () (boo#1172727)\n- CVE-2020-26664: Fixed heap-based buffer overflow in EbmlTypeDispatcher:send () (boo#1180755)\n","status":"published","published":"2021-01-16T18:54:28Z","modified":"2026-02-04T03:04:36.694887Z","updated_at":"2026-11-02T16:58:31.879684Z"},{"id":"openSUSE-SU-2021:0121-1","title":"Security update for vlc","description":"This update for vlc fixes the following issues:\n\nUpdate to 3.0.11.1:\n    \n- CVE-2020-13428: Fixed heap-based buffer overflow in the hxxx_AnnexB_to_xVC () (boo#1172727)\n- CVE-2020-26664: Fixed heap-based buffer overflow in EbmlTypeDispatcher:send () (boo#1180755)\n\nThis update was imported from the openSUSE:Leap:15.1:Update update project.","status":"published","published":"2021-01-19T17:24:42Z","modified":"2026-02-04T02:16:35.082601Z","updated_at":"2026-11-02T16:58:31.879684Z"},{"id":"openSUSE-SU-2021:0122-1","title":"Security update for vlc","description":"This update for vlc fixes the following issues:\n\nUpdate to 3.0.11.1:\n    \n- CVE-2020-13428: Fixed heap-based buffer overflow in the hxxx_AnnexB_to_xVC () (boo#1172727)\n- CVE-2020-26664: Fixed heap-based buffer overflow in EbmlTypeDispatcher:send () (boo#1180755)\n\nThis update was imported from the openSUSE:Leap:15.2:Update update project.","status":"published","published":"2021-01-19T23:23:58Z","modified":"2026-02-04T03:42:07.056982Z","updated_at":"2026-11-02T16:58:31.879684Z"},{"id":"openSUSE-SU-2021:0691-1","title":"Security update for vlc","description":"This update for vlc fixes the following issues:\n\nUpdate to version 3.0.13:\n\n  + Demux:\n\n    - Adaptive: fix artefacts in HLS streams with wrong profiles/levels\n    - Fix regression on some MP4 files for the audio track\n    - Fix MPGA and ADTS probing in TS files\n    - Fix Flac inside AVI files\n    - Fix VP9/Webm artefacts when seeking\n\n  + Codec:\n\n    - Support SSA text scaling\n    - Fix rotation on Android rotation\n    - Fix WebVTT subtitles that start at 00:00\n\n  + Access:\n\n    - Update libnfs to support NFSv4\n    - Improve SMB2 integration\n    - Fix Blu-ray files using Unicode names on Windows\n    - Disable mcast lookups on Android for RTSP playback\n\n  + Video Output: Rework the D3D11 rendering wait, to fix\n    choppiness on display\n  + Interfaces:\n\n    - Fix VLC getting stuck on close on X11 (#21875)\n    - Improve RTL on preferences on macOS\n    - Add mousewheel horizontal axis control\n    - Fix crash on exit on macOS\n    - Fix sizing of the fullscreen controls on macOS\n\n  + Misc:\n\n    - Improve MIDI fonts search on Linux\n    - Update Soundcloud, Youtube, liveleak\n    - Fix compilation with GCC11\n    - Fix input-slave option for subtitles\n  + Updated translations.\n\nUpdate to version 3.0.12:\n\n  + Access: Add new RIST access module compliant with simple\n    profile (VSF_TR-06-1).\n  + Access Output: Add new RIST access output module compliant with\n    simple profile (VSF_TR-06-1).\n  + Demux: Fixed adaptive's handling of resolution settings.\n  + Audio output: Fix audio distortion on macOS during start of\n    playback.\n  + Video Output: Direct3D11: Fix some potential crashes when using\n    video filters.\n  + Misc:\n\n    - Several fixes in the web interface, including privacy and\n      security improvements\n    - Update YouTube and Vocaroo scripts.\n\n  + Updated translations.\n","status":"published","published":"2021-05-08T22:05:51Z","modified":"2026-02-04T03:45:31.621595Z","updated_at":"2026-11-02T16:58:31.879684Z"},{"id":"openSUSE-SU-2021:0714-1","title":"Security update for vlc","description":"This update for vlc fixes the following issues:\n\nUpdate to version 3.0.13:\n\n  + Demux:\n\n    - Adaptive: fix artefacts in HLS streams with wrong profiles/levels\n    - Fix regression on some MP4 files for the audio track\n    - Fix MPGA and ADTS probing in TS files\n    - Fix Flac inside AVI files\n    - Fix VP9/Webm artefacts when seeking\n\n  + Codec:\n\n    - Support SSA text scaling\n    - Fix rotation on Android rotation\n    - Fix WebVTT subtitles that start at 00:00\n\n  + Access:\n\n    - Update libnfs to support NFSv4\n    - Improve SMB2 integration\n    - Fix Blu-ray files using Unicode names on Windows\n    - Disable mcast lookups on Android for RTSP playback\n\n  + Video Output: Rework the D3D11 rendering wait, to fix\n    choppiness on display\n  + Interfaces:\n\n    - Fix VLC getting stuck on close on X11 (#21875)\n    - Improve RTL on preferences on macOS\n    - Add mousewheel horizontal axis control\n    - Fix crash on exit on macOS\n    - Fix sizing of the fullscreen controls on macOS\n\n  + Misc:\n\n    - Improve MIDI fonts search on Linux\n    - Update Soundcloud, Youtube, liveleak\n    - Fix compilation with GCC11\n    - Fix input-slave option for subtitles\n  + Updated translations.\n\nUpdate to version 3.0.12:\n\n  + Access: Add new RIST access module compliant with simple\n    profile (VSF_TR-06-1).\n  + Access Output: Add new RIST access output module compliant with\n    simple profile (VSF_TR-06-1).\n  + Demux: Fixed adaptive's handling of resolution settings.\n  + Audio output: Fix audio distortion on macOS during start of\n    playback.\n  + Video Output: Direct3D11: Fix some potential crashes when using\n    video filters.\n  + Misc:\n\n    - Several fixes in the web interface, including privacy and\n      security improvements\n    - Update YouTube and Vocaroo scripts.\n\n  + Updated translations.\n\nThis update was imported from the openSUSE:Leap:15.2:Update update project.","status":"published","published":"2021-05-12T10:05:31Z","modified":"2026-02-04T03:53:19.120563Z","updated_at":"2026-11-02T16:58:31.879684Z"},{"id":"openSUSE-SU-2024:11502-1","title":"libvlc5-3.0.16-1.5 on GA media","description":"These are all security issues fixed in the libvlc5-3.0.16-1.5 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T02:48:02.043281Z","updated_at":"2026-11-02T16:58:35.195147Z"}]}}