PT-2026-135737

In dec vlc read of oapv vlc.c, there is a possible out-of-bounds read due to a heap buffer overflow. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...

openSUSE 16: libvlc5 / libvlccore9 / vlc / vlc-codec-fluidsynth / etc (openSUSE-SU-2026:22198-1)

The remote openSUSE 16 host has packages installed that are affected by a vulnerability as referenced in the openSUSE- SU-2026:22198-1 advisory. Changes in vlc: - Add conditional for pkgconfigvpl BuildRequires and plugin, exclude %arm ppc64le %ppc s390x. - Add conditional for pkgconfiglibnfs...

DLL_Injection_On_VLC

DLL Injection and CVE-2010-3124 Overview 🌱 This project explores the topic of DLL Dynamic Link Library injection and specifically focuses on the CVE-2010-3124. CVE-2010-3124 refers to an untrusted search path vulnerability found in VLC Media Player version 1.1.3 and earlier. Here are key points...

VLC-CVE-2008-4654-Exploit

VLC-CVE-2008-4654-Exploit Well, it's just an old vulnerability whose CVE number is CVE-2008-4654. This vulnerability is caused by Out of Memory at line 1650 of modules/demux/ty.c. streamReadpdemux-s, mstbuf, 8 + imapsize; When I downloaded the EXP from other websites, I found that it doesn't work...

CVE-2008-4654

CVE-2008-4654 A fully functional exploit for the stack-based buffer overflow vulnerability CVE-2008-4654 in VideoLan’s VLC Media Player 0.9.4 when processing TiVo files. It targets a 32-bit binary running on a 64-bit Windows system and uses a WOW64 egghunter to bypass limited stack space. Usage...

CLEANSTART-2024-CP44189 exploitable denial-of-service vulnerability exists in the resource allocation handling of Videolabs libmicrodns 0

Security vulnerability affects the vlc package. An exploitable denial-of-service vulnerability exists in the resource allocation handling of Videolabs libmicrodns 0...

CLEANSTART-2024-SW32678 exploitable denial-of-service vulnerability exists in the message-parsing functionality of Videolabs libmicrodns 0

Security vulnerability affects the vlc package. An exploitable denial-of-service vulnerability exists in the message-parsing functionality of Videolabs libmicrodns 0...

CLEANSTART-2024-DV65191 exploitable code execution vulnerability exists in the label-parsing functionality of Videolabs libmicrodns 0

Security vulnerability affects the vlc package. An exploitable code execution vulnerability exists in the label-parsing functionality of Videolabs libmicrodns 0...

CLEANSTART-2024-CW32473 heap-based buffer overflow in the hxxx_AnnexB_to_xVC function in modules/packetizer/hxxx_nal

Security vulnerability affects the vlc package. A heap-based buffer overflow in the hxxxAnnexBtoxVC function in modules/packetizer/hxxxnal...

CLEANSTART-2024-ZW86343 integer overflow in the VNC module in VideoLAN VLC Media Player through 3

Security vulnerability affects the vlc package. An integer overflow in the VNC module in VideoLAN VLC Media Player through 3...

VLC_CVE-2021-25801_Analysis

CVE-2021-25801 Analysis The vulnerability stems from a failure to throughly check the type of chunk being passed to Parseindx when attempting to read a sub indx chunk, pointed to by a valid super indx chunk. else if pindx-iindextype == AVIINDEXOFINDEXES //this is the expected value for super inde...

VLC_CVE-2021-25804_Analysis

An AVI file can have multiple tracks. For example an audio track and a video track. In order to parse an arbitrary number of tracks VLC first must determine if a given track is finished and playable. Two variables are set up with this purpose in mind. Both named itrack. The variable psys...

CVE-2008-4654

CVE-2008-4654 VideoLAN VLC media player 0.9.4 Media Player ty.c buffer overflow Diff...

Security update for vlc (important)

openSUSE security update: security update for vlc ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:22198-1 Rating: important References: bsc1279900 Cross-References: CVE-2026-56711 Affected Products: openSUSE Leap 16.0...

CVE-2008-4654

CVE-2008-4654 PoC exploit for vulnerability CVE-2008-4654 VLC Media Player Stack-Based Buffer Overflow via TiVo Ty file extension. Usage Run the script having a sample .ty+ file inside the same folder as the script. The ty+ file will be modified to execute the payload when opened with VLC Media...

[SECURITY] [DLA 4869-1] vlc security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-4869-1 [email protected] https://www.debian.org/lts/security/ Simon Quigley October 29, 2026 https://wiki.debian.org/LTS -...

Debian dla-4869 : libvlc-bin - security update

The remote Debian 12 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-4869 advisory. - ------------------------------------------------------------------------- Debian LTS Advisory DLA-4869-1 [email protected]...

OPENSUSE-SU-2026:22198-1 Security update for vlc

This update for vlc fixes the following issues: Changes in vlc: - Add conditional for pkgconfigvpl BuildRequires and plugin, exclude %arm ppc64le %ppc s390x. - Add conditional for pkgconfiglibnfs BuildRequires and plugin, exclude %arm - Switch to qt6: Drop libQt5Gui-private-headers-devel,...

Fedora 46 : live555 / vlc (2026-cad2480b8a)

The remote Fedora 46 host has packages installed that are affected by a vulnerability as referenced in the FEDORA-2026-cad2480b8a advisory. Latest upstream release of live555. Multiple security-relevant bug fixes, see: https://download.live555.com/changelog.txt . Tenable has extracted the precedi...

CVE-2026-115724

VLC for Android before 3.7.2 contains a confused-deputy file overwrite vulnerability in FileUtils.getUri that trusts content URIs based only on the com.fsck.k9.attachmentprovider or gmail-ls authority. A co-installed app without permissions can declare these authorities and send a crafted VIEW...