KLA66427 ACE vulnerability in VLC media player

An execute arbitrary code vulnerability was found in VLC media player. Malicious users can exploit this vulnerability to execute arbitrary code.

Original advisories

SB-VLC3019

Related products

VLC-media-player

CVE list

CVE-2023-46814 critical

Solution

Update to the latest version

Download VLC media player

Impacts

• ACE

Arbitrary code execution. Exploitation of vulnerabilities with this impact can lead to executing by abuser any code or commands at vulnerable machine or process.

• SB

Security bypass. Exploitation of vulnerabilities with this impact can lead to performing actions restricted by current security settings.

Affected Products

• VLC media player earlier than 3.0.19