530 matches found
VLC media player Heap Buffer Overflow Info Disclosure
The vulnerability of the VideoLAN VLC media player lies in the reading of data beyond the allowed range of memory. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...
KLA91317 Multiple vulnerabilities in VLC media player
Multiple vulnerabilities were found in VLC. Malicious users can exploit these vulnerabilities to execute arbitrary code, bypass security restrictions, gain privileges, spoof user interface. Below is a complete list of vulnerabilities: 1. An elevation of privilege vulnerability can be exploited...
CVE-2026-26228
VideoLAN VLC for Android prior to version 3.7.0 contains a path traversal vulnerability in the Remote Access Server routing for the authenticated endpoint GET /download. The file query parameter is concatenated into a filesystem path under the configured download directory without canonicalizatio...
CVE-2026-26228
VideoLAN VLC for Android prior to version 3.7.0 contains a path traversal vulnerability in the Remote Access Server routing for the authenticated endpoint GET /download. The file query parameter is concatenated into a filesystem path under the configured download directory without canonicalizatio...
CVE-2026-26228 VLC for Android < 3.7.0 Remote Access Path Traversal
VideoLAN VLC for Android prior to version 3.7.0 contains a path traversal vulnerability in the Remote Access Server routing for the authenticated endpoint GET /download. The file query parameter is concatenated into a filesystem path under the configured download directory without canonicalizatio...
CVE-2026-26227: Improper Restriction of Excessive Authentication Attempts
VideoLAN VLC for Android prior to version 3.7.0 contains an authentication bypass in the Remote Access Server feature due to missing or insufficient rate limiting on one-time password OTP verification. The Remote Access Server uses a 4-digit OTP and does not enforce effective throttling or lockou...
PT-2026-22155
Name of the Vulnerable Software and Affected Versions VideoLAN VLC for Android versions prior to 3.7.0 Description The software contains a path traversal issue in the Remote Access Server routing for the authenticated endpoint ''/download''. The file query parameter is combined into a filesystem...
CVE-2026-26228: Improper Limitation of a Pathname to a Restricted Directory
VideoLAN VLC for Android prior to version 3.7.0 contains a path traversal vulnerability in the Remote Access Server routing for the authenticated endpoint GET /download. The file query parameter is concatenated into a filesystem path under the configured download directory without canonicalizatio...
CVE-2025-51602
mmstu.c in VideoLAN VLC media player before 3.0.22 allows an out-of-bounds read and denial of service via a crafted 0x01 response from an MMS server...
VideoLAN VLC Media Player buffer error vulnerability
VideoLAN VLC Media Player is a free, open-source cross-platform multimedia player developed by the French company VideoLAN. It is also a multimedia framework. This product supports playback of various media types such as files and discs and various audio/video formats such as WMV and MP3. Version...
CVE-2025-51602: Out-of-bounds Read
mmstu.c in VideoLAN VLC media player before 3.0.22 allows an out-of-bounds read and denial of service via a crafted 0x01 response from an MMS server...
CVE-2019-12874
An issue was discovered in zlibdecompressextra in modules/demux/mkv/util.cpp in VideoLAN VLC media player 3.x through 3.0.7. The Matroska demuxer, while parsing a malformed MKV file type, has a double free...
EUVD-2008-2144
Malware in sbrugna...
EUVD-2013-6735
Malware in sbrugna...
EUVD-2019-5050
Malware in sbrugna...
EUVD-2012-3349
Malware in sbrugna...
EUVD-2017-17273
Malware in sbrugna...
EUVD-2017-17271
Malware in sbrugna...