videolan vulnerabilities

Products

• vlc media player 114
• vlc 17
• libbluray 3
• videolan/vlc-android 3
• dav1d 2
• libdvdnav 2
• vlc for mobile 1

Latest videolan CVEs

Newest publication first · page 1 of 6

1. CVE-2026-115724 VLC for Android before 3.7.2 File Overwrite via Spoofed Mail Attachment Provider

   Published 2026-10-23

   Low·CVSS 2.1 EPSS 0.09%

   VLC for Android before 3.7.2 contains a confused-deputy file overwrite vulnerability in FileUtils.getUri() that trusts content URIs based only on the com.fsck.k9.attachmentprovider or gmail-ls authority. A co-installed app without permissions can declare these authorities and sen...

2. CVE-2026-112283 libbluray through 1.5.1 Uncontrolled Memory Allocation via _parse_extent_start_points

   Published 2026-10-19

   Medium·CVSS 6.8 EPSS 0.18%

   VideoLAN libbluray through 1.5.1 contains an uncontrolled memory allocation vulnerability in _parse_extent_start_points() in clpi_parse.c that trusts the num_point field without bounds checking. Attackers can supply a crafted .clpi file on a disc, image, or directory with a huge...

3. CVE-2026-112282 VideoLAN libbluray through 1.5.1 Out-of-Bounds Read via clpi_access_point

   Published 2026-10-19

   Medium·CVSS 6.8 EPSS 0.18%

   VideoLAN libbluray through 1.5.1 contains an out-of-bounds read vulnerability in clpi_access_point() that allows attackers to crash applications by supplying a ClipInfo file with an empty EP-map fine table. Attackers can place a crafted .clpi file in BDMV/CLIPINF with num_ep_fine...

4. CVE-2026-112058 libdvdnav through 7.0.0 Out-of-Bounds Read via set_PTT JumpTT

   Published 2026-10-18

   Medium·CVSS 6.8 EPSS 0.18%

   VideoLAN libdvdnav through 7.0.0 contains an out-of-bounds read vulnerability in set_PTT that allows attackers to crash applications by supplying an invalid JumpTT title number checked only by an assert. Attackers can craft a DVD or disc image whose First Play program chain issue...

5. CVE-2026-112057 libdvdnav before 7.0.0 Out-of-Bounds Read in dvdnav_describe_title_chapters

   Published 2026-10-18

   Medium·CVSS 6.8 EPSS 0.18%

   libdvdnav before 7.0.0 contains a heap out-of-bounds read vulnerability in dvdnav_describe_title_chapters that allows attackers to read beyond the part-of-title array by supplying an oversized vts_ttn value. Attackers can provide a crafted DVD or disc image declaring a larger VMG...

6. CVE-2026-102875 VLC media player before 3.0.24 Path Traversal via skins2

   Published 2026-09-29

   High·CVSS 8.5 EPSS 0.17%

   VLC media player before 3.0.24 contains a path traversal vulnerability in the skins2 ThemeLoader that fails to validate member names in .vlt skin archives. Attackers can craft malicious skin files with path traversal sequences to write arbitrary files with VLC user privileges, en...

7. CVE-2026-73324 VLC media player 3.0.0 through 3.0.23 information disclosure vulnerability

   Published 2026-09-09

   Medium·CVSS 5.3 EPSS 0.24%

   Certain VLC media player builds in versions 3.0.0 through 3.0.23 contain a memory-safety vulnerability reachable when processing media from an attacker-controlled network source. Exploitation requires user interaction and may disclose a limited, layout-dependent amount of VLC pro...

8. CVE-2026-56711 VLC media player 3.0.0 through 3.0.23 memory corruption vulnerability

   Published 2026-09-09

   High·CVSS 7.3 EPSS 0.12%

   VLC media player versions 3.0.0 through 3.0.23 contain a memory-safety vulnerability reachable when processing crafted media. Exploitation requires user interaction and may result in application termination or code execution with the privileges of the VLC process.

9. CVE-2026-26227 VLC for Android < 3.7.0 Remote Access OTP Authentication Bypass

   Published 2026-02-26

   Medium·CVSS 6.3 EPSS 0.33%

   VideoLAN VLC for Android prior to version 3.7.0 contains an authentication bypass in the Remote Access Server feature due to missing or insufficient rate limiting on one-time password (OTP) verification. The Remote Access Server uses a 4-digit OTP and does not enforce effective t...

10. CVE-2026-26228 VLC for Android < 3.7.0 Remote Access Path Traversal

    Published 2026-02-26

    Low·CVSS 2.3 EPSS 0.32%

    VideoLAN VLC for Android prior to version 3.7.0 contains a path traversal vulnerability in the Remote Access Server routing for the authenticated endpoint GET /download. The file query parameter is concatenated into a filesystem path under the configured download directory withou...

11. CVE-2025-51602 mmstu.c in VideoLAN VLC media player before 3.0.22 allows an out-of-bounds read and denial of service via a crafted 0x01 response from an MMS server.

    Published 2026-01-16

    Medium·CVSS 4.8 EPSS 0.41%

    mmstu.c in VideoLAN VLC media player before 3.0.22 allows an out-of-bounds read and denial of service via a crafted 0x01 response from an MMS server.

12. CVE-2024-46461 VLC media player 3.0.20 and earlier is vulnerable to denial of service through an integer overflow which could be triggered with a maliciously crafted mms stream (heap based overflow). If successful,....

    Published 2024-09-25

    High·CVSS 8.0 EPSS 0.60%

    VLC media player 3.0.20 and earlier is vulnerable to denial of service through an integer overflow which could be triggered with a maliciously crafted mms stream (heap based overflow). If successful, a malicious third party could trigger either a crash of VLC or an arbitrary code...

13. CVE-2024-1580 Integer overflow in VideoLAN dav1d

    Published 2024-02-19

    High·CVSS 8.8 EPSS 1.8%

    An integer overflow in dav1d AV1 decoder that can occur when decoding videos with large frame size. This can lead to memory corruption within the AV1 decoder. We recommend upgrading past version 1.4.0 of dav1d.

14. CVE-2023-46814 A binary hijacking vulnerability exists within the VideoLAN VLC media player before 3.0.19 on Windows. The uninstaller attempts to execute code with elevated privileges out of a standard user writable...

    Published 2023-11-22

    High·CVSS 7.8 EPSS 0.29%

    A binary hijacking vulnerability exists within the VideoLAN VLC media player before 3.0.19 on Windows. The uninstaller attempts to execute code with elevated privileges out of a standard user writable location. Standard users may use this to gain arbitrary code execution as SYSTE...

15. CVE-2023-47360 Videolan VLC prior to version 3.0.20 contains an Integer underflow that leads to an incorrect packet length.

    Published 2023-11-07

    High·CVSS 7.5 EPSS 1.1%

    Videolan VLC prior to version 3.0.20 contains an Integer underflow that leads to an incorrect packet length.

16. CVE-2023-47359 Videolan VLC prior to version 3.0.20 contains an incorrect offset read that leads to a Heap-Based Buffer Overflow in function GetPacket() and results in a memory corruption.

    Published 2023-11-07

    Critical·CVSS 9.8 EPSS 1.3%

    Videolan VLC prior to version 3.0.20 contains an incorrect offset read that leads to a Heap-Based Buffer Overflow in function GetPacket() and results in a memory corruption.

17. CVE-2023-32570 VideoLAN dav1d before 1.2.0 has a thread_task.c race condition that can lead to an application crash, related to dav1d_decode_frame_exit.

    Published 2023-05-10

    Medium·CVSS 5.9 EPSS 0.75%

    VideoLAN dav1d before 1.2.0 has a thread_task.c race condition that can lead to an application crash, related to dav1d_decode_frame_exit.

18. CVE-2022-41325 An integer overflow in the VNC module in VideoLAN VLC Media Player through 3.0.17.4 allows attackers, by tricking a user into opening a crafted playlist or connecting to a rogue VNC server, to crash V...

    Published 2022-12-06

    High·CVSS 7.8 EPSS 0.70%

    An integer overflow in the VNC module in VideoLAN VLC Media Player through 3.0.17.4 allows attackers, by tricking a user into opening a crafted playlist or connecting to a rogue VNC server, to crash VLC or execute code under some conditions.

19. CVE-2021-25804 A NULL-pointer dereference in "Open" in avi.c of VideoLAN VLC Media Player 3.0.11 can a denial of service (DOS) in the application.

    Published 2021-07-26

    High·CVSS 7.5 EPSS 1.8%

    A NULL-pointer dereference in "Open" in avi.c of VideoLAN VLC Media Player 3.0.11 can a denial of service (DOS) in the application.

20. CVE-2021-25803 A buffer overflow vulnerability in the vlc_input_attachment_New component of VideoLAN VLC Media Player 3.0.11 allows attackers to cause an out-of-bounds read via a crafted .avi file.

    Published 2021-07-26

    High·CVSS 7.1 EPSS 0.74%

    A buffer overflow vulnerability in the vlc_input_attachment_New component of VideoLAN VLC Media Player 3.0.11 allows attackers to cause an out-of-bounds read via a crafted .avi file.

21. CVE-2021-25802 A buffer overflow vulnerability in the AVI_ExtractSubtitle component of VideoLAN VLC Media Player 3.0.11 allows attackers to cause an out-of-bounds read via a crafted .avi file.

    Published 2021-07-26

    High·CVSS 7.1 EPSS 0.74%

    A buffer overflow vulnerability in the AVI_ExtractSubtitle component of VideoLAN VLC Media Player 3.0.11 allows attackers to cause an out-of-bounds read via a crafted .avi file.

22. CVE-2021-25801 A buffer overflow vulnerability in the __Parse_indx component of VideoLAN VLC Media Player 3.0.11 allows attackers to cause an out-of-bounds read via a crafted .avi file.

    Published 2021-07-26

    High·CVSS 7.1 EPSS 1.5%

    A buffer overflow vulnerability in the __Parse_indx component of VideoLAN VLC Media Player 3.0.11 allows attackers to cause an out-of-bounds read via a crafted .avi file.

23. CVE-2020-26664 A vulnerability in EbmlTypeDispatcher::send in VideoLAN VLC media player 3.0.11 allows attackers to trigger a heap-based buffer overflow via a crafted .mkv file.

    Published 2021-01-08

    High·CVSS 7.8 EPSS 1.5%

    A vulnerability in EbmlTypeDispatcher::send in VideoLAN VLC media player 3.0.11 allows attackers to trigger a heap-based buffer overflow via a crafted .mkv file.

24. CVE-2020-13428 A heap-based buffer overflow in the hxxx_AnnexB_to_xVC function in modules/packetizer/hxxx_nal.c in VideoLAN VLC media player before 3.0.11 for macOS/iOS allows remote attackers to cause a denial of s...

    Published 2020-06-08

    High·CVSS 7.8 EPSS 2.5%

    A heap-based buffer overflow in the hxxx_AnnexB_to_xVC function in modules/packetizer/hxxx_nal.c in VideoLAN VLC media player before 3.0.11 for macOS/iOS allows remote attackers to cause a denial of service (application crash) or execute arbitrary code via a crafted H.264 Annex-B...

25. CVE-2019-19721 An off-by-one error in the DecodeBlock function in codec/sdl_image.c in VideoLAN VLC media player before 3.0.9 allows remote attackers to cause a denial of service (memory corruption) via a crafted im...

    Published 2020-05-15

    High·CVSS 7.8 EPSS 2.0%

    An off-by-one error in the DecodeBlock function in codec/sdl_image.c in VideoLAN VLC media player before 3.0.9 allows remote attackers to cause a denial of service (memory corruption) via a crafted image file. NOTE: this may be related to the SDL_Image product.

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.