VM
Product
VLC media player
115
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 6High 35Medium 12Low 0
Watch
Add VLC media player to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2019-5439 | 6.5 | Jun 13 | A Buffer Overflow in VLC Media Player < 3.0.7 causes a crash which can possibly be further developed into a remote code execution exploit Affected: before 3.0.7 |
| CVE-2013-3245 | 6.3 | Jul 10 | plugins/demux/libmkv_plugin.dll in VideoLAN VLC Media Player 2.0.7, and possibly other versions, allows remote attackers to cause a denial of service (crash) and possibly execute… Affected: 2.0.7 |
| CVE-2013-3565 | 6.1 | Jan 31 | Multiple cross-site scripting (XSS) vulnerabilities in the HTTP Interface in VideoLAN VLC Media Player before 2.0.7 allow remote attackers to inject arbitrary web script or HTML… Affected: before 2.0.7 |
| CVE-2019-14534 | 5.5 | Aug 29 | In VideoLAN VLC media player 3.0.7.1, there is a NULL pointer dereference at the function SeekPercent of demux/asf/asf.c that will lead to a denial of service attack Affected: 3.0.7.1 |
| CVE-2019-5460 | 5.5 | Jul 30 | Double Free in VLC versions <= 3.0.6 leads to a crash Affected: through 3.0.6 |
| CVE-2019-13615 | 5.5 | Jul 16 | libebml before 1.3.6, as used in the MKV module in VideoLAN VLC Media Player binaries before 3.0.3, has a heap-based buffer over-read in EbmlElement::FindNextElement Affected: before 3.0.3 |
| CVE-2017-8313 | 5.5 | May 23 | Heap out-of-bound read in ParseJSS in VideoLAN VLC before 2.2.5 due to missing check of string termination allows attackers to read data beyond allocated memory and potentially… Affected: through 2.2.4 |
| CVE-2017-8312 | 5.5 | May 23 | Heap out-of-bound read in ParseJSS in VideoLAN VLC due to missing check of string length allows attackers to read heap uninitialized data via a crafted subtitles file Affected: before 2.2.6 |
| CVE-2017-8310 | 5.5 | May 23 | Heap out-of-bound read in CreateHtmlSubtitle in VideoLAN VLC 2.2.x due to missing check of string termination allows attackers to read data beyond allocated memory and potentially… Affected: 2.2.0; 2.2.1; 2.2.2; 2.2.3; 2.2.4; 2.2.5 |
| CVE-2016-3941 | 5.5 | Apr 18 | Buffer overflow in the AStreamPeekStream function in input/stream.c in VideoLAN VLC media player before 2.2.0 allows remote attackers to cause a denial of service (crash) via a… Affected: through 2.1.6 |
| CVE-2013-3564 | 5.3 | Feb 6 | The web interface in VideoLAN VLC media player before 2.0.7 has no access control which allows remote attackers to view directory listings via the 'dir' command or issue other… Affected: before 2.0.7 |
| CVE-2026-73324 | 4.3 | Sep 9 | VLC media player 3.0.0 through 3.0.23 information disclosure vulnerability Affected: 3.0.0 through 3.0.23 |
Showing 12