3784 matches found
CVE-2008-4654
CVE-2008-4654 VideoLAN VLC media player 0.9.4 Media Player ty.c buffer overflow Diff...
CVE-2026-73324
VLC media player copies an RTSP response line into a fixed buffer with...
CVE-2026-56711
VLC media player computes the size of a picture buffer with 32-bit ari...
DLL_Injection_On_VLC
DLL Injection and CVE-2010-3124 Overview 🌱 This project explores the topic of DLL Dynamic Link Library injection and specifically focuses on the CVE-2010-3124. CVE-2010-3124 refers to an untrusted search path vulnerability found in VLC Media Player version 1.1.3 and earlier. Here are key points...
CVE-2026-36433
An issue in Actions Semiconductor Co. Ltd Tool- Media Player Utilities v.4.46 allows a physically proximate attacker execute arbitrary code via the Production.dll and RdiskUpgrade.exe components...
CVE-2026-73324
A flaw was found in VLC media player. A remote attacker operating a hostile server can exploit a heap out-of-bounds read vulnerability. This occurs when the media player processes an unterminated Real Time Streaming Protocol RTSP response line, causing it to read beyond the allocated buffer...
CVE-2026-56711
A flaw was found in VLC media player. An integer overflow vulnerability exists when computing the size of a picture buffer, specifically in the AllocatePicture function. A remote attacker could exploit this by providing a specially crafted Portable Network Graphics PNG image file with large width...
CVE-2026-73324
VLC media player copies an RTSP response line into a fixed buffer without guaranteeing termination and then treats that buffer as a C string. RtspReadLine in modules/access/rtsp/access.c calls strncpy with the full buffer length, which writes no terminator when the source line is at least as long...
CVE-2026-56711
VLC media player computes the size of a picture buffer with 32-bit arithmetic and allocates from the wrapped result. In AllocatePicture in src/misc/picture.c the running total is accumulated as ibytes += p-ipitch p-ilines, and both planet fields are declared int in include/vlcpicture.h, so the...
CVE-2026-73324
VLC media player 3.0.0 through 3.0.23 is affected by a heap out-of-bounds read in the RTSP module. The root cause is that RtspReadLine in modules/access/rtsp/access.c calls strncpy with the full buffer length without guaranteeing null termination, and rtsp_get in modules/access/rtsp/rtsp.c passes...
EUVD-2026-74907
VLC media player copies an RTSP response line into a fixed buffer without guaranteeing termination and then treats that buffer as a C string. RtspReadLine in modules/access/rtsp/access.c calls strncpy with the full buffer length, which writes no terminator when the source line is at least as long...
CVE-2026-73324 VLC media player 3.0.0 through 3.0.23 Heap Out-of-Bounds Read via Unterminated RealRTSP Response Line
VLC media player copies an RTSP response line into a fixed buffer without guaranteeing termination and then treats that buffer as a C string. RtspReadLine in modules/access/rtsp/access.c calls strncpy with the full buffer length, which writes no terminator when the source line is at least as long...
EUVD-2026-74906
VLC media player computes the size of a picture buffer with 32-bit arithmetic and allocates from the wrapped result. In AllocatePicture in src/misc/picture.c the running total is accumulated as ibytes += p-ipitch p-ilines, and both planet fields are declared int in include/vlcpicture.h, so the...
CVE-2026-56711
VLC media player 3.0.0 through 3.0.23 is affected by a heap out-of-bounds write caused by a 32-bit integer overflow in picture buffer allocation. In AllocatePicture (src/misc/picture.c), the fields i_pitch and i_lines are declared as int, so the multiplication wraps before widening to the size_t ...
CVE-2026-56711 VLC media player 3.0.0 through 3.0.23 Heap Out-of-Bounds Write via Integer Overflow in Picture Allocation
VLC media player computes the size of a picture buffer with 32-bit arithmetic and allocates from the wrapped result. In AllocatePicture in src/misc/picture.c the running total is accumulated as ibytes += p-ipitch p-ilines, and both planet fields are declared int in include/vlcpicture.h, so the...
CVE-2008-4654
CVE-2008-4654 A fully functional exploit for the stack-based buffer overflow vulnerability CVE-2008-4654 in VideoLan’s VLC Media Player 0.9.4 when processing TiVo files. It targets a 32-bit binary running on a 64-bit Windows system and uses a WOW64 egghunter to bypass limited stack space. Usage...
CVE-2026-36433
This is a critical arbitrary code execution vulnerability in Actions Semiconductor Co. Ltd 's Media Player Utilities v.4.46 , affecting the Production.dll and RdiskUpgrade.exe components. Per the PT-2026-86449 report, the root cause is the absence of signature verification, checksum validation, a...
EUVD-2026-75164
An issue in Actions Semiconductor Co. Ltd Tool- Media Player Utilities v.4.46 allows a physically proximate attacker execute arbitrary code via the Production.dll and RdiskUpgrade.exe components...
CVE-2008-4654
CVE-2008-4654 PoC exploit for vulnerability CVE-2008-4654 VLC Media Player Stack-Based Buffer Overflow via TiVo Ty file extension. Usage Run the script having a sample .ty+ file inside the same folder as the script. The ty+ file will be modified to execute the payload when opened with VLC Media...