VM
Product
VLC media player
by VideoLAN · last CVE Sep 9, 2026
115
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 6High 35Medium 12Low 0
Watch

Add VLC media player to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2023-47359
9.8
1%
Nov 7
Videolan VLC prior to version 3.0.20 contains an incorrect offset read that leads to a Heap-Based Buffer Overflow in function GetPacket() and results in a memory corruption
Affected: before 3.0.20
CVE-2019-13962
9.8
4%
Jul 18
lavc_CopyPicture in modules/codec/avcodec/video.c in VideoLAN VLC media player through 3.0.7 has a heap-based buffer over-read because it does not properly validate the width and…
Affected: through 3.0.7
CVE-2019-12874
9.8
2%
Jun 18
An issue was discovered in zlib_decompress_extra in modules/demux/mkv/util.cpp in VideoLAN VLC media player 3.x through 3.0.7
Affected: 3.0.0 through 3.0.7
CVE-2017-10699
9.8
4%
Jun 30
avcodec 2.2.x, as used in VideoLAN VLC media player 2.2.7-x before 2017-06-29, allows out-of-bounds heap memory write due to calling memcpy() with a wrong size, leading to a…
Affected: 2.2.0; 2.2.1; 2.2.2; 2.2.3; 2.2.4; 2.2.5; +3 more
CVE-2016-5108
9.8
25%
Jun 8
Buffer overflow in the DecodeAdpcmImaQT function in modules/codec/adpcm.c in VideoLAN VLC media player before 2.2.4 allows remote attackers to cause a denial of service (crash) or…
Affected: through 2.2.3
CVE-2018-19857
9.1
4%
Dec 5
The CAF demuxer in modules/demux/caf.c in VideoLAN VLC media player 3.0.4 may read memory from an uninitialized pointer when processing magic cookies in CAF files, because a…
Affected: 3.0.4
Showing 6