558 matches found
CLEANSTART-2024-ZW86343 integer overflow in the VNC module in VideoLAN VLC Media Player through 3
Security vulnerability affects the vlc package. An integer overflow in the VNC module in VideoLAN VLC Media Player through 3...
VideoLAN VLC for Android input validation error vulnerability
Versions of VideoLAN VLC for Android prior to 3.7.2 contain an input validation error vulnerability. This vulnerability arises because FileUtils.getUri trusts content URIs solely based on com.fsck.k9.attachmentprovider or gmail-ls authority. Unauthorized applications can exploit this by declaring...
VLC media player Heap Buffer Overflow Info Disclosure
The vulnerability of the VideoLAN VLC media player lies in the reading of data beyond the allowed range of memory. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...
KLA91317 Multiple vulnerabilities in VLC media player
Multiple vulnerabilities were found in VLC. Malicious users can exploit these vulnerabilities to execute arbitrary code, bypass security restrictions, gain privileges, spoof user interface. Below is a complete list of vulnerabilities: 1. An elevation of privilege vulnerability can be exploited...
VLC Media Player MKV Use After Free
CVE-2018-11529: Use-after-free in VideoLAN VLC = 2.2.8 MKV parsing 32-bit and 64-bit. Generates two .mkv files: part1 vulnerability + heap spray to open in VLC, and part2 must sit in the same directory. Requires a raw shellcode payload = 0x300 bytes. Meterpreter-sized payloads often crash VLC —...
CVE-2026-26228
VideoLAN VLC for Android prior to version 3.7.0 contains a path traversal vulnerability in the Remote Access Server routing for the authenticated endpoint GET /download. The file query parameter is concatenated into a filesystem path under the configured download directory without canonicalizatio...
CVE-2026-26228
VideoLAN VLC for Android prior to version 3.7.0 contains a path traversal vulnerability in the Remote Access Server routing for the authenticated endpoint GET /download. The file query parameter is concatenated into a filesystem path under the configured download directory without canonicalizatio...
CVE-2026-26228 VLC for Android < 3.7.0 Remote Access Path Traversal
VideoLAN VLC for Android prior to version 3.7.0 contains a path traversal vulnerability in the Remote Access Server routing for the authenticated endpoint GET /download. The file query parameter is concatenated into a filesystem path under the configured download directory without canonicalizatio...
CVE-2026-26227: Improper Restriction of Excessive Authentication Attempts
VideoLAN VLC for Android prior to version 3.7.0 contains an authentication bypass in the Remote Access Server feature due to missing or insufficient rate limiting on one-time password OTP verification. The Remote Access Server uses a 4-digit OTP and does not enforce effective throttling or lockou...
PT-2026-22155
Name of the Vulnerable Software and Affected Versions VideoLAN VLC for Android versions prior to 3.7.0 Description The software contains a path traversal issue in the Remote Access Server routing for the authenticated endpoint ''/download''. The file query parameter is combined into a filesystem...
CVE-2026-26228: Improper Limitation of a Pathname to a Restricted Directory
VideoLAN VLC for Android prior to version 3.7.0 contains a path traversal vulnerability in the Remote Access Server routing for the authenticated endpoint GET /download. The file query parameter is concatenated into a filesystem path under the configured download directory without canonicalizatio...
CVE-2025-51602
mmstu.c in VideoLAN VLC media player before 3.0.22 allows an out-of-bounds read and denial of service via a crafted 0x01 response from an MMS server...
CVE-2025-51602: Out-of-bounds Read
mmstu.c in VideoLAN VLC media player before 3.0.22 allows an out-of-bounds read and denial of service via a crafted 0x01 response from an MMS server...
VideoLAN VLC Media Player buffer error vulnerability
VideoLAN VLC Media Player is a free, open-source cross-platform multimedia player developed by the French company VideoLAN. It is also a multimedia framework. This product supports playback of various media types such as files and discs and various audio/video formats such as WMV and MP3. Version...
CVE-2025-51602
mmstu.c in VideoLAN VLC media player before 3.0.22 allows an out-of-bounds read and denial of service via a crafted 0x01 response from an MMS server...
CVE-2019-12874
An issue was discovered in zlibdecompressextra in modules/demux/mkv/util.cpp in VideoLAN VLC media player 3.x through 3.0.7. The Matroska demuxer, while parsing a malformed MKV file type, has a double free...
EUVD-2012-2383
Malware in sbrugna...
EUVD-2011-2571
Malware in sbrugna...