CVE-2025-51602

mmstu.c in VideoLAN VLC media player before 3.0.22 allows an out-of-bounds read and denial of service via a crafted 0x01 response from an MMS server...

VLC Media Player AVI_ExtractSubtitle Confidential Data DoS

The vulnerability of the AVIExtractSubtitle component in the VLC Media Player media player is related to the copying of buffers without checking the input data. Exploiting this vulnerability allows a remote attacker to gain access to confidential data and also cause a service failure by using a...

CVE-2021-25801

A buffer overflow vulnerability in the Parseindx component of VideoLAN VLC Media Player 3.0.11 allows attackers to cause an out-of-bounds read via a crafted .avi file...

VLC DecodeAdpcmImaQT Heap Buffer Overflow DoS

The vulnerability of the DecodeAdpcmImaQT function modules/codec/adpcm.c in the VideoLAN VLC media player lies in the lack of measures for cleaning incoming data. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code or cause a service failure using a specially...

VLC Media Player Heap Buffer Overflow DoS

The vulnerability of the CAF media player VideoLAN VLC lies in the access to an uninitialized pointer due to a numerical overflow during the processing of cookie files in the ReadKukiChunk function. Exploiting this vulnerability allows a remote attacker to cause service failures and/or gain acces...

UBUNTU-CVE-2017-9301

plugins\audiofilter\libmpgatofixed32plugin.dll in VideoLAN VLC media player 2.2.4 allows remote attackers to cause a denial of service invalid read and application crash or possibly have unspecified other impact via a crafted file...

UBUNTU-CVE-2017-8310

Heap out-of-bound read in CreateHtmlSubtitle in VideoLAN VLC 2.2.x due to missing check of string termination allows attackers to read data beyond allocated memory and potentially crash the process causing a denial of service via a crafted subtitles file...

UBUNTU-CVE-2016-3941

Buffer overflow in the AStreamPeekStream function in input/stream.c in VideoLAN VLC media player before 2.2.0 allows remote attackers to cause a denial of service crash via a crafted wav file, related to "seek across EOF."...