CVE-2026-56711

VLC media player versions 3.0.0 through 3.0.23 contain a memory-safety vulnerability reachable when processing crafted media. Exploitation requires user interaction and may result in application termination or code execution with the privileges of the VLC process...

UBUNTU-CVE-2026-56711

VLC media player versions 3.0.0 through 3.0.23 contain a memory-safety vulnerability reachable when processing crafted media. Exploitation requires user interaction and may result in application termination or code execution with the privileges of the VLC process...

CVE-2026-73324 VLC media player 3.0.0 through 3.0.23 information disclosure vulnerability

Certain VLC media player builds in versions 3.0.0 through 3.0.23 contain a memory-safety vulnerability reachable when processing media from an attacker-controlled network source. Exploitation requires user interaction and may disclose a limited, layout-dependent amount of VLC process memory...

CVE-2026-73324 VLC media player 3.0.0 through 3.0.23 information disclosure vulnerability

Certain VLC media player builds in versions 3.0.0 through 3.0.23 contain a memory-safety vulnerability reachable when processing media from an attacker-controlled network source. Exploitation requires user interaction and may disclose a limited, layout-dependent amount of VLC process memory...

EUVD-2026-74907

VLC media player copies an RTSP response line into a fixed buffer without guaranteeing termination and then treats that buffer as a C string. RtspReadLine in modules/access/rtsp/access.c calls strncpy with the full buffer length, which writes no terminator when the source line is at least as long...

CVE-2026-73324

VLC media player 3.0.0 through 3.0.23 is affected by a heap out-of-bounds read in the RTSP module. The root cause is that RtspReadLine in modules/access/rtsp/access.c calls strncpy with the full buffer length without guaranteeing null termination, and rtsp_get in modules/access/rtsp/rtsp.c passes...

CVE-2026-73324 VLC media player 3.0.0 through 3.0.23 information disclosure vulnerability

Certain VLC media player builds in versions 3.0.0 through 3.0.23 contain a memory-safety vulnerability reachable when processing media from an attacker-controlled network source. Exploitation requires user interaction and may disclose a limited, layout-dependent amount of VLC process memory...

CVE-2026-73324

Certain VLC media player builds in versions 3.0.0 through 3.0.23 contain a memory-safety vulnerability reachable when processing media from an attacker-controlled network source. Exploitation requires user interaction and may disclose a limited, layout-dependent amount of VLC process memory...

EUVD-2026-74906

VLC media player computes the size of a picture buffer with 32-bit arithmetic and allocates from the wrapped result. In AllocatePicture in src/misc/picture.c the running total is accumulated as ibytes += p-ipitch p-ilines, and both planet fields are declared int in include/vlcpicture.h, so the...

CVE-2026-56711 VLC media player 3.0.0 through 3.0.23 memory corruption vulnerability

VLC media player versions 3.0.0 through 3.0.23 contain a memory-safety vulnerability reachable when processing crafted media. Exploitation requires user interaction and may result in application termination or code execution with the privileges of the VLC process...

CVE-2026-56711

VLC media player 3.0.0 through 3.0.23 is affected by a heap out-of-bounds write caused by a 32-bit integer overflow in picture buffer allocation. In AllocatePicture (src/misc/picture.c), the fields i_pitch and i_lines are declared as int, so the multiplication wraps before widening to the size_t ...

CVE-2026-56711 VLC media player 3.0.0 through 3.0.23 memory corruption vulnerability

VLC media player versions 3.0.0 through 3.0.23 contain a memory-safety vulnerability reachable when processing crafted media. Exploitation requires user interaction and may result in application termination or code execution with the privileges of the VLC process...

CVE-2026-56711

VLC media player versions 3.0.0 through 3.0.23 contain a memory-safety vulnerability reachable when processing crafted media. Exploitation requires user interaction and may result in application termination or code execution with the privileges of the VLC process...

CVE-2026-56711 VLC media player 3.0.0 through 3.0.23 memory corruption vulnerability

VLC media player versions 3.0.0 through 3.0.23 contain a memory-safety vulnerability reachable when processing crafted media. Exploitation requires user interaction and may result in application termination or code execution with the privileges of the VLC process...

CVE-2026-56711: Integer Overflow or Wraparound

VLC media player versions 3.0.0 through 3.0.23 contain a memory-safety vulnerability reachable when processing crafted media. Exploitation requires user interaction and may result in application termination or code execution with the privileges of the VLC process...

PT-2026-88995

VLC media player copies an RTSP response line into a fixed buffer without guaranteeing termination and then treats that buffer as a C string. RtspReadLine in modules/access/rtsp/access.c calls strncpy with the full buffer length, which writes no terminator when the source line is at least as long...

PT-2026-88993

VLC media player computes the size of a picture buffer with 32-bit arithmetic and allocates from the wrapped result. In AllocatePicture in src/misc/picture.c the running total is accumulated as i bytes += p-i pitch p-i lines, and both plane t fields are declared int in include/vlc picture.h, so t...

CVE-2026-73324: Out-of-bounds Read

Certain VLC media player builds in versions 3.0.0 through 3.0.23 contain a memory-safety vulnerability reachable when processing media from an attacker-controlled network source. Exploitation requires user interaction and may disclose a limited, layout-dependent amount of VLC process memory...

Astra Linux – Vulnerability in vlc

VLC Media Player 3.0.20 and earlier are vulnerable to denial of service due to an integer overflow. This vulnerability can be exploited by a maliciously crafted MMS stream heap-based overflow. If successful, a malicious third party can cause the VLC player to crash or execute arbitrary code with...

vlc:vlc-demux-dec-libfuzzer-mod: Heap-buffer-overflow in CSoundFile::ReadMID

Project: https://github.com/videolan/vlc.git Detailed Report: https://oss-fuzz.com/testcase?key=5227659138498560 Project: vlc Fuzzing Engine: libFuzzer Fuzz Target: vlc-demux-dec-libfuzzer-mod Job Type: libfuzzerasanvlc Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address:...