Vulnerabilidades do Videolan Vlc Media Player
🔔 Criar alerta RSS Verificador de versão
CVEs publicadas que afetam Videolan Vlc Media Player: 10 registro(s), com versões afetadas e correções.cpe:2.3:a:videolan:vlc_media_player
CVE-2026-73324
Média · 4.3
CWE-125 09/09/2026
VLC media player 3.0.0 through 3.0.23 information disclosure vulnerability
Certain VLC media player builds in versions 3.0.0 through 3.0.23 contain a memory-safety vulnerability reachable when processing media from an attacker-controlled network source. Exploitation requires user interaction and may disclose a limited, layout-dependent amount of VLC process memory. Exposure depends on build configuration.
CVE-2026-56711
Alta · 7.0
CWE-190 09/09/2026
VLC media player 3.0.0 through 3.0.23 memory corruption vulnerability
VLC media player versions 3.0.0 through 3.0.23 contain a memory-safety vulnerability reachable when processing crafted media. Exploitation requires user interaction and may result in application termination or code execution with the privileges of the VLC process.
CVE-2025-51602
Média · 4.8
CWE-125 16/01/2026
Out-of-bounds Read em Videolan Vlc Media Player
mmstu.c in VideoLAN VLC media player before 3.0.22 allows an out-of-bounds read and denial of service via a crafted 0x01 response from an MMS server.
CVE-2020-26664
Alta · 7.8
CWE-787 08/01/2021
Out-of-bounds Write em Videolan Vlc Media Player
A vulnerability in EbmlTypeDispatcher::send in VideoLAN VLC media player 3.0.11 allows attackers to trigger a heap-based buffer overflow via a crafted .mkv file.
CVE-2019-19721
Alta · 7.8
CWE-193 15/05/2020
An off-by-one error in the DecodeBlock function in codec/sdl_image.c in VideoLAN VLC…
An off-by-one error in the DecodeBlock function in codec/sdl_image.c in VideoLAN VLC media player before 3.0.9 allows remote attackers to cause a denial of service (memory corruption) via a crafted image file. NOTE: this may be related to the SDL_Image product.
CVE-2019-5460
Média · 5.5
CWE-415 30/07/2019
Double Free em Videolan Vlc Media Player
Double Free in VLC versions <= 3.0.6 leads to a crash.
CVE-2019-5459
Alta · 7.1
CWE-191 30/07/2019
Integer Underflow em Videolan Vlc Media Player
An Integer underflow in VLC Media Player versions < 3.0.7 leads to an out-of-band read.
CVE-2019-13962
Crítica · 9.8
CWE-125 18/07/2019
Out-of-bounds Read em Videolan Vlc Media Player
lavc_CopyPicture in modules/codec/avcodec/video.c in VideoLAN VLC media player through 3.0.7 has a heap-based buffer over-read because it does not properly validate the width and height.
CVE-2019-13602
Alta · 7.8
CWE-191 14/07/2019
Integer Underflow em Videolan Vlc Media Player
An Integer Underflow in MP4_EIA608_Convert() in modules/demux/mp4/mp4.c in VideoLAN VLC media player through 3.0.7.1 allows remote attackers to cause a denial of service (heap-based buffer overflow and crash) or possibly have unspecified other impact via a crafted .mp4 file.
CVE-2018-19857
Crítica · 9.1
CWE-824 05/12/2018
The CAF demuxer in modules/demux/caf.c in VideoLAN VLC media player 3.0.4 may read memory from an...
The CAF demuxer in modules/demux/caf.c in VideoLAN VLC media player 3.0.4 may read memory from an uninitialized pointer when processing magic cookies in CAF files, because a ReadKukiChunk() cast converts a return value to an unsigned int even if that value is negative. This could result in a denial of service and/or a potential infoleak.