Videolan Vlc vulnerabilities

• videolan vlc for android VLC for Android before 3.7.2 File Overwrite via Spoofed Mail Attachment Provider CVE-2026-115724 2.1 LowOctober 23, 2026
• videolan vlc VLC media player before 3.0.24 Path Traversal via skins2 CVE-2026-102875 Fix available 8.5 HighSeptember 29, 2026
• videolan vlc media player VLC media player 3.0.0 through 3.0.23 information disclosure vulnerability CVE-2026-73324 Fix available 5.3 MediumSeptember 9, 2026
• videolan vlc media player VLC media player 3.0.0 through 3.0.23 memory corruption vulnerability CVE-2026-56711 Fix available 7.3 HighSeptember 9, 2026
• videolan vlc for android VLC for Android < 3.7.0 Remote Access OTP Authentication Bypass CVE-2026-26227 6.3 MediumFebruary 26, 2026
• videolan vlc for android VLC for Android < 3.7.0 Remote Access Path Traversal CVE-2026-26228 2.3 LowFebruary 26, 2026
• videolan vlc media player mmstu.c in VideoLAN VLC media player before 3.0.22 allows an out-of-bounds read and denial of... CVE-2025-51602 Fix available 4.8 MediumDecember 14, 2025
• videolan vlc media player VLC media player 3.0.20 and earlier is vulnerable to denial of service through an integer... CVE-2024-46461 Fix available 8.0 HighJune 11, 2024
• videolan vlc media player A binary hijacking vulnerability exists within the VideoLAN VLC media player before 3.0.19 on... CVE-2023-46814 7.8 HighNovember 22, 2023
• videolan vlc media player Videolan VLC prior to version 3.0.20 contains an Integer underflow that leads to an incorrect... CVE-2023-47360 Fix available 7.5 HighNovember 2, 2023
• videolan vlc media player Videolan VLC prior to version 3.0.20 contains an incorrect offset read that leads to a Heap-Based... CVE-2023-47359 Fix available 9.8 CriticalNovember 2, 2023
• videolan vlc media player, debian linux +1 more An integer overflow in the VNC module in VideoLAN VLC Media Player through 3.0.17.4 allows... CVE-2022-41325 Fix available 7.8 HighDecember 3, 2022
• videolan vlc media player A NULL-pointer dereference in "Open" in avi.c of VideoLAN VLC Media Player 3.0.11 can a denial of... CVE-2021-25804 Public exploitFix available 7.5 HighJanuary 22, 2021
• videolan vlc media player A buffer overflow vulnerability in the vlc_input_attachment_New component of VideoLAN VLC Media... CVE-2021-25803 Fix available 7.1 HighJanuary 22, 2021
• videolan vlc media player A buffer overflow vulnerability in the AVI_ExtractSubtitle component of VideoLAN VLC Media Player... CVE-2021-25802 Fix available 7.1 HighJanuary 22, 2021
• videolan vlc media player A buffer overflow vulnerability in the __Parse_indx component of VideoLAN VLC Media Player 3.0.11... CVE-2021-25801 Public exploitFix available 7.1 HighJanuary 22, 2021
• videolan vlc media player, debian linux +1 more A vulnerability in EbmlTypeDispatcher::send in VideoLAN VLC media player 3.0.11 allows attackers... CVE-2020-26664 Fix available 7.8 HighJanuary 8, 2021
• videolan vlc media player, debian linux +1 more A heap-based buffer overflow in the hxxx_AnnexB_to_xVC function in modules/packetizer/hxxx_nal.c... CVE-2020-13428 Fix available 7.8 HighJune 8, 2020
• videolan vlc media player An off-by-one error in the DecodeBlock function in codec/sdl_image.c in VideoLAN VLC media player... CVE-2019-19721 Fix available 7.8 HighApril 30, 2020
• videolan vlc media player The web interface in VideoLAN VLC media player before 2.0.7 has no access control which allows... CVE-2013-3564 Fix available 5.3 MediumFebruary 6, 2020
• videolan vlc media player When executing VideoLAN VLC media player 3.0.8 with libqt on Windows, Data from a Faulting... CVE-2019-18278 7.8 HighOctober 23, 2019
• videolan vlc media player, debian linux +1 more A vulnerability in mkv::event_thread_t in VideoLAN VLC media player 3.0.7.1 allows remote... CVE-2019-14970 Fix available 7.8 HighAugust 20, 2019
• videolan vlc media player, debian linux +1 more The mkv::virtual_segment_c::seek method of demux/mkv/virtual_segment.cpp in VideoLAN VLC media... CVE-2019-14778 Fix available 7.8 HighAugust 20, 2019
• videolan vlc media player, debian linux +1 more The Control function of demux/mkv/mkv.cpp in VideoLAN VLC media player 3.0.7.1 has a use-after-free. CVE-2019-14777 Fix available 7.8 HighAugust 20, 2019
• videolan vlc media player, debian linux +1 more A heap-based buffer over-read exists in DemuxInit() in demux/asf/asf.c in VideoLAN VLC media... CVE-2019-14776 Fix available 7.8 HighAugust 20, 2019
• videolan vlc media player, debian linux +1 more A divide-by-zero error exists in the SeekIndex function of demux/asf/asf.c in VideoLAN VLC media... CVE-2019-14535 Fix available 7.8 HighAugust 20, 2019
• videolan vlc media player, debian linux +1 more In VideoLAN VLC media player 3.0.7.1, there is a NULL pointer dereference at the function... CVE-2019-14534 Fix available 5.5 MediumAugust 20, 2019
• videolan vlc media player, debian linux +1 more The Control function of demux/asf/asf.c in VideoLAN VLC media player 3.0.7.1 has a use-after-free. CVE-2019-14533 Fix available 7.8 HighAugust 20, 2019
• videolan vlc media player, debian linux +1 more A divide-by-zero error exists in the Control function of demux/caf.c in VideoLAN VLC media player... CVE-2019-14498 Fix available 7.8 HighAugust 20, 2019
• videolan vlc media player, debian linux +1 more A heap-based buffer over-read in xiph_PackHeaders() in modules/demux/xiph.h in VideoLAN VLC media... CVE-2019-14438 Fix available 7.8 HighAugust 20, 2019
• videolan vlc media player, debian linux +1 more The xiph_SplitHeaders function in modules/demux/xiph.h in VideoLAN VLC media player 3.0.7.1 does... CVE-2019-14437 Fix available 7.8 HighAugust 20, 2019
• videolan vlc media player, canonical ubuntu linux, debian linux +2 more +4 more lavc_CopyPicture in modules/codec/avcodec/video.c in VideoLAN VLC media player through 3.0.7 has... CVE-2019-13962 Fix available 9.8 CriticalJuly 18, 2019
• videolan vlc media player VideoLAN VLC media player 3.0.7.1 has a heap-based buffer over-read in mkv::demux_sys_t:... CVE-2019-13615 Fix available 5.5 MediumJuly 16, 2019
• videolan vlc media player, canonical ubuntu linux, debian linux +2 more +4 more An Integer Underflow in MP4_EIA608_Convert() in modules/demux/mp4/mp4.c in VideoLAN VLC media... CVE-2019-13602 Fix available 7.8 HighJuly 14, 2019
• opensuse backports, leap, videolan vlc media player +2 more Double Free in VLC versions <= 3.0.6 leads to a crash. CVE-2019-5460 Fix available 5.5 MediumJune 12, 2019
• videolan vlc, vlc media player, opensuse backports +2 more +4 more An Integer underflow in VLC Media Player versions < 3.0.7 leads to an out-of-band read. CVE-2019-5459 Fix available 7.1 HighJune 12, 2019
• videolan vlc media player A Buffer Overflow in VLC Media Player < 3.0.7 causes a crash which can possibly be further... CVE-2019-5439 Fix available 6.5 MediumJune 12, 2019
• videolan vlc media player An issue was discovered in zlib_decompress_extra in modules/demux/mkv/util.cpp in VideoLAN VLC... CVE-2019-12874 Fix available 9.8 CriticalJune 12, 2019
• videolan vlc for mobile A local, authenticated attacker can bypass the passcode in the VideoLAN VLC media player app... CVE-2018-19937 6.6 MediumDecember 31, 2018
• videolan vlc media player, debian linux +1 more The CAF demuxer in modules/demux/caf.c in VideoLAN VLC media player 3.0.4 may read memory from an... CVE-2018-19857 Fix available 9.1 CriticalDecember 5, 2018
• videolan vlc media player, debian linux +1 more VideoLAN VLC media player 2.2.x is prone to a use after free vulnerability which an attacker can... CVE-2018-11529 Public exploitFix available EPSS 40.5% 8.0 HighJuly 11, 2018
• videolan vlc media player The vlc_demux_chained_Delete function in input/demux_chained.c in VideoLAN VLC media player 3.0.1... CVE-2018-11516 Fix available 8.8 HighMay 28, 2018
• videolan vlc media player, debian linux +1 more In VideoLAN VLC media player through 2.2.8, there is a type conversion vulnerability in modules... CVE-2017-17670 Fix available 8.8 HighDecember 15, 2017
• videolan vlc media player avcodec 2.2.x, as used in VideoLAN VLC media player 2.2.7-x before 2017-06-29, allows out-of... CVE-2017-10699 Fix available 9.8 CriticalJune 30, 2017
• videolan vlc media player plugins\audio_filter\libmpgatofixed32_plugin.dll in VideoLAN VLC media player 2.2.4 allows remote... CVE-2017-9301 Fix available 7.8 HighMay 29, 2017
• videolan vlc media player plugins\codec\libflac_plugin.dll in VideoLAN VLC media player 2.2.4 allows remote attackers to... CVE-2017-9300 Fix available 7.8 HighMay 29, 2017
• videolan vlc, vlc media player +1 more Heap out-of-bound read in ParseJSS in VideoLAN VLC before 2.2.5 due to missing check of string... CVE-2017-8313 Fix available 5.5 MediumMay 23, 2017
• videolan vlc, debian linux, videolan vlc media player +2 more Heap out-of-bound read in ParseJSS in VideoLAN VLC due to missing check of string length allows... CVE-2017-8312 Fix available 5.5 MediumMay 23, 2017
• videolan vlc, vlc media player +1 more Potential heap based buffer overflow in ParseJSS in VideoLAN VLC before 2.2.5 due to skipping... CVE-2017-8311 Public exploitFix available 7.8 HighMay 23, 2017
• videolan vlc, vlc media player +1 more Heap out-of-bound read in CreateHtmlSubtitle in VideoLAN VLC 2.2.x due to missing check of string... CVE-2017-8310 Fix available 5.5 MediumMay 23, 2017
• Show olderLoading…