Videolan vulnerabilities

Products

• Vlc Media Player 114
• Vlc 16
• Vlc Media Player 5
• Libbluray 3
• Vlc For Android 3
• Dav1d 2
• Libdvdnav 2

Newest

• videolan vlc for android VLC for Android before 3.7.2 File Overwrite via Spoofed Mail Attachment Provider CVE-2026-115724 2.1 LowOctober 23, 2026
• libbluray libbluray through 1.5.1 Uncontrolled Memory Allocation via _parse_extent_start_points CVE-2026-112283 6.8 MediumOctober 19, 2026
• libbluray VideoLAN libbluray through 1.5.1 Out-of-Bounds Read via clpi_access_point CVE-2026-112282 6.8 MediumOctober 19, 2026
• videolan libdvdnav libdvdnav through 7.0.0 Out-of-Bounds Read via set_PTT JumpTT CVE-2026-112058 6.8 MediumOctober 18, 2026
• videolan libdvdnav libdvdnav before 7.0.0 Out-of-Bounds Read in dvdnav_describe_title_chapters CVE-2026-112057 6.8 MediumOctober 18, 2026
• videolan vlc VLC media player before 3.0.24 Path Traversal via skins2 CVE-2026-102875 Fix available 8.5 HighSeptember 29, 2026
• videolan vlc media player VLC media player 3.0.0 through 3.0.23 information disclosure vulnerability CVE-2026-73324 Fix available 5.3 MediumSeptember 9, 2026
• videolan vlc media player VLC media player 3.0.0 through 3.0.23 memory corruption vulnerability CVE-2026-56711 Fix available 7.3 HighSeptember 9, 2026
• videolan vlc for android VLC for Android < 3.7.0 Remote Access OTP Authentication Bypass CVE-2026-26227 6.3 MediumFebruary 26, 2026
• videolan vlc for android VLC for Android < 3.7.0 Remote Access Path Traversal CVE-2026-26228 2.3 LowFebruary 26, 2026
• videolan vlc media player mmstu.c in VideoLAN VLC media player before 3.0.22 allows an out-of-bounds read and denial of... CVE-2025-51602 Fix available 4.8 MediumDecember 14, 2025
• videolan vlc media player VLC media player 3.0.20 and earlier is vulnerable to denial of service through an integer... CVE-2024-46461 Fix available 8.0 HighJune 11, 2024
• videolan dav1d, apple ipados, iphone os +4 more +6 more Integer overflow in VideoLAN dav1d CVE-2024-1580 Fix available 5.9 MediumFebruary 19, 2024
• videolan vlc media player A binary hijacking vulnerability exists within the VideoLAN VLC media player before 3.0.19 on... CVE-2023-46814 7.8 HighNovember 22, 2023
• videolan vlc media player Videolan VLC prior to version 3.0.20 contains an Integer underflow that leads to an incorrect... CVE-2023-47360 Fix available 7.5 HighNovember 2, 2023
• videolan vlc media player Videolan VLC prior to version 3.0.20 contains an incorrect offset read that leads to a Heap-Based... CVE-2023-47359 Fix available 9.8 CriticalNovember 2, 2023
• videolan dav1d, fedoraproject fedora +1 more VideoLAN dav1d before 1.2.0 has a thread_task.c race condition that can lead to an application... CVE-2023-32570 Fix available 5.9 MediumMay 10, 2023
• videolan vlc media player, debian linux +1 more An integer overflow in the VNC module in VideoLAN VLC Media Player through 3.0.17.4 allows... CVE-2022-41325 Fix available 7.8 HighDecember 3, 2022
• videolan vlc media player A NULL-pointer dereference in "Open" in avi.c of VideoLAN VLC Media Player 3.0.11 can a denial of... CVE-2021-25804 Public exploitFix available 7.5 HighJanuary 22, 2021
• videolan vlc media player A buffer overflow vulnerability in the vlc_input_attachment_New component of VideoLAN VLC Media... CVE-2021-25803 Fix available 7.1 HighJanuary 22, 2021
• videolan vlc media player A buffer overflow vulnerability in the AVI_ExtractSubtitle component of VideoLAN VLC Media Player... CVE-2021-25802 Fix available 7.1 HighJanuary 22, 2021
• videolan vlc media player A buffer overflow vulnerability in the __Parse_indx component of VideoLAN VLC Media Player 3.0.11... CVE-2021-25801 Public exploitFix available 7.1 HighJanuary 22, 2021
• videolan vlc media player, debian linux +1 more A vulnerability in EbmlTypeDispatcher::send in VideoLAN VLC media player 3.0.11 allows attackers... CVE-2020-26664 Fix available 7.8 HighJanuary 8, 2021
• videolan vlc media player, debian linux +1 more A heap-based buffer overflow in the hxxx_AnnexB_to_xVC function in modules/packetizer/hxxx_nal.c... CVE-2020-13428 Fix available 7.8 HighJune 8, 2020
• videolan vlc media player An off-by-one error in the DecodeBlock function in codec/sdl_image.c in VideoLAN VLC media player... CVE-2019-19721 Fix available 7.8 HighApril 30, 2020
• videolan vlc media player The web interface in VideoLAN VLC media player before 2.0.7 has no access control which allows... CVE-2013-3564 Fix available 5.3 MediumFebruary 6, 2020
• libbluray, debian linux, fedoraproject fedora +1 more +3 more libbluray MountManager class has a time-of-check time-of-use (TOCTOU) race when expanding JAR files CVE-2015-7810 Fix available 4.7 MediumNovember 22, 2019
• videolan vlc media player When executing VideoLAN VLC media player 3.0.8 with libqt on Windows, Data from a Faulting... CVE-2019-18278 7.8 HighOctober 23, 2019
• videolan vlc media player, debian linux +1 more A vulnerability in mkv::event_thread_t in VideoLAN VLC media player 3.0.7.1 allows remote... CVE-2019-14970 Fix available 7.8 HighAugust 20, 2019
• videolan vlc media player, debian linux +1 more The mkv::virtual_segment_c::seek method of demux/mkv/virtual_segment.cpp in VideoLAN VLC media... CVE-2019-14778 Fix available 7.8 HighAugust 20, 2019
• videolan vlc media player, debian linux +1 more The Control function of demux/mkv/mkv.cpp in VideoLAN VLC media player 3.0.7.1 has a use-after-free. CVE-2019-14777 Fix available 7.8 HighAugust 20, 2019
• videolan vlc media player, debian linux +1 more A heap-based buffer over-read exists in DemuxInit() in demux/asf/asf.c in VideoLAN VLC media... CVE-2019-14776 Fix available 7.8 HighAugust 20, 2019
• videolan vlc media player, debian linux +1 more A divide-by-zero error exists in the SeekIndex function of demux/asf/asf.c in VideoLAN VLC media... CVE-2019-14535 Fix available 7.8 HighAugust 20, 2019
• videolan vlc media player, debian linux +1 more In VideoLAN VLC media player 3.0.7.1, there is a NULL pointer dereference at the function... CVE-2019-14534 Fix available 5.5 MediumAugust 20, 2019
• videolan vlc media player, debian linux +1 more The Control function of demux/asf/asf.c in VideoLAN VLC media player 3.0.7.1 has a use-after-free. CVE-2019-14533 Fix available 7.8 HighAugust 20, 2019
• videolan vlc media player, debian linux +1 more A divide-by-zero error exists in the Control function of demux/caf.c in VideoLAN VLC media player... CVE-2019-14498 Fix available 7.8 HighAugust 20, 2019
• videolan vlc media player, debian linux +1 more A heap-based buffer over-read in xiph_PackHeaders() in modules/demux/xiph.h in VideoLAN VLC media... CVE-2019-14438 Fix available 7.8 HighAugust 20, 2019
• videolan vlc media player, debian linux +1 more The xiph_SplitHeaders function in modules/demux/xiph.h in VideoLAN VLC media player 3.0.7.1 does... CVE-2019-14437 Fix available 7.8 HighAugust 20, 2019
• videolan vlc media player, canonical ubuntu linux, debian linux +2 more +4 more lavc_CopyPicture in modules/codec/avcodec/video.c in VideoLAN VLC media player through 3.0.7 has... CVE-2019-13962 Fix available 9.8 CriticalJuly 18, 2019
• videolan vlc media player VideoLAN VLC media player 3.0.7.1 has a heap-based buffer over-read in mkv::demux_sys_t:... CVE-2019-13615 Fix available 5.5 MediumJuly 16, 2019
• videolan vlc media player, canonical ubuntu linux, debian linux +2 more +4 more An Integer Underflow in MP4_EIA608_Convert() in modules/demux/mp4/mp4.c in VideoLAN VLC media... CVE-2019-13602 Fix available 7.8 HighJuly 14, 2019
• opensuse backports, leap, videolan vlc media player +2 more Double Free in VLC versions <= 3.0.6 leads to a crash. CVE-2019-5460 Fix available 5.5 MediumJune 12, 2019
• videolan vlc, vlc media player, opensuse backports +2 more +4 more An Integer underflow in VLC Media Player versions < 3.0.7 leads to an out-of-band read. CVE-2019-5459 Fix available 7.1 HighJune 12, 2019
• videolan vlc media player A Buffer Overflow in VLC Media Player < 3.0.7 causes a crash which can possibly be further... CVE-2019-5439 Fix available 6.5 MediumJune 12, 2019
• videolan vlc media player An issue was discovered in zlib_decompress_extra in modules/demux/mkv/util.cpp in VideoLAN VLC... CVE-2019-12874 Fix available 9.8 CriticalJune 12, 2019
• videolan vlc for mobile A local, authenticated attacker can bypass the passcode in the VideoLAN VLC media player app... CVE-2018-19937 6.6 MediumDecember 31, 2018
• videolan vlc media player, debian linux +1 more The CAF demuxer in modules/demux/caf.c in VideoLAN VLC media player 3.0.4 may read memory from an... CVE-2018-19857 Fix available 9.1 CriticalDecember 5, 2018
• videolan vlc media player, debian linux +1 more VideoLAN VLC media player 2.2.x is prone to a use after free vulnerability which an attacker can... CVE-2018-11529 Public exploitFix available EPSS 40.5% 8.0 HighJuly 11, 2018
• videolan vlc media player The vlc_demux_chained_Delete function in input/demux_chained.c in VideoLAN VLC media player 3.0.1... CVE-2018-11516 Fix available 8.8 HighMay 28, 2018
• videolan vlc media player, debian linux +1 more In VideoLAN VLC media player through 2.2.8, there is a type conversion vulnerability in modules... CVE-2017-17670 Fix available 8.8 HighDecember 15, 2017
• Show olderLoading…