Browse CVEs

HIGH 7.5 CVE-2021-25804 A NULL-pointer dereference in "Open" in avi.c of VideoLAN VLC Media Player 3.0.11 can a denial of service (DOS) in the application. Vlc Media Player Mitigation only Fix from $1,9502021-07-26 HIGH 7.1 CVE-2021-25801 A buffer overflow vulnerability in the __Parse_indx component of VideoLAN VLC Media Player 3.0.11 allows attackers to cause an out-of-bounds read via… Vlc Media Player Mitigation only Fix from $1,9502021-07-26 HIGH 7.1 CVE-2021-25803 A buffer overflow vulnerability in the vlc_input_attachment_New component of VideoLAN VLC Media Player 3.0.11 allows attackers to cause an out-of-bou… Vlc Media Player Mitigation only Fix from $1,9502021-07-26 HIGH 7.8 CVE-2019-18278 When executing VideoLAN VLC media player 3.0.8 with libqt on Windows, Data from a Faulting Address controls Code Flow starting at libqt_plugin!vlc_en… Vlc Media Player No fix yet Fix from $1,9502019-10-23 HIGH 8.8 CVE-2018-11516 The vlc_demux_chained_Delete function in input/demux_chained.c in VideoLAN VLC media player 3.0.1 allows remote attackers to cause a denial of servic… Vlc Media Player No fix yet Fix from $1,9502018-05-28 CRITICAL 9.8 CVE-2017-10699 avcodec 2.2.x, as used in VideoLAN VLC media player 2.2.7-x before 2017-06-29, allows out-of-bounds heap memory write due to calling memcpy() with a … Vlc Media Player Mitigation only Fix from $2,3002017-06-30 MEDIUM 5.5 CVE-2017-8310 Heap out-of-bound read in CreateHtmlSubtitle in VideoLAN VLC 2.2.x due to missing check of string termination allows attackers to read data beyond al… Vlc Media Player Mitigation only Fix from $1,6002017-05-23 MEDIUM 6.8 CVE-2014-9598EPSS 6% The picture_Release function in misc/picture.c in VideoLAN VLC media player 2.1.5 allows remote attackers to execute arbitrary code or cause a denial… Vlc Media Player Mitigation only Fix from $1,6002015-01-21 MEDIUM 6.8 CVE-2014-9597EPSS 7% The picture_pool_Delete function in misc/picture_pool.c in VideoLAN VLC media player 2.1.5 allows remote attackers to execute arbitrary code or cause… Vlc Media Player Mitigation only Fix from $1,6002015-01-21 MEDIUM 6.3 CVE-2013-3245 plugins/demux/libmkv_plugin.dll in VideoLAN VLC Media Player 2.0.7, and possibly other versions, allows remote attackers to cause a denial of service… Vlc Media Player No fix yet Fix from $1,6002013-07-10 HIGH 9.3 CVE-2011-2194EPSS 9% Integer overflow in the XSPF playlist parser in VideoLAN VLC media player 0.8.5 through 1.1.9 allows remote attackers to cause a denial of service (c… Vlc Media Player Mitigation only Fix from $1,9502011-06-24 HIGH 7.6 CVE-2011-1087EPSS 8% Buffer overflow in VideoLAN VLC media player 1.0.5 allows user-assisted remote attackers to cause a denial of service (memory corruption and applicat… Vlc Media Player No fix yet Fix from $1,9502011-05-03 MEDIUM 5.0 CVE-2010-2937 The ReadMetaFromId3v2 function in taglib.cpp in the TagLib plugin in VideoLAN VLC media player 0.9.0 through 1.1.2 does not properly process ID3v2 ta… Vlc Media Player Mitigation only Fix from $1,6002010-08-20 HIGH 9.3 CVE-2010-0364EPSS 7% Stack-based buffer overflow in VideoLAN VLC Media Player 0.8.6 allows user-assisted remote attackers to execute arbitrary code via an ogg file with a… Vlc Media Player No fix yet Fix from $1,9502010-01-21 MEDIUM 5.0 CVE-2009-1045EPSS 9% requests/status.xml in VLC 0.9.8a allows remote attackers to cause a denial of service (stack consumption and crash) via a long input argument in an … Vlc Media Player No fix yet Fix from $1,6002009-03-23 HIGH 9.3 CVE-2008-5276EPSS 8% Integer overflow in the ReadRealIndex function in real.c in the Real demuxer plugin in VideoLAN VLC media player 0.9.0 through 0.9.7 allows remote at… Vlc Media Player No fix yet Fix from $1,9502008-12-03 HIGH 9.3 CVE-2008-5036EPSS 41% Stack-based buffer overflow in VideoLAN VLC media player 0.9.x before 0.9.6 might allow user-assisted attackers to execute arbitrary code via an an i… Vlc Media Player No fix yet Fix from $1,9502008-11-10 HIGH 9.3 CVE-2008-5032EPSS 11% Stack-based buffer overflow in VideoLAN VLC media player 0.5.0 through 0.9.5 might allow user-assisted attackers to execute arbitrary code via the he… Vlc Media Player No fix yet Fix from $1,9502008-11-10 HIGH 9.3 CVE-2008-4686EPSS 10% Multiple integer overflows in ty.c in the TY demux plugin (aka the TiVo demuxer) in VideoLAN VLC media player, probably 0.9.4, might allow remote att… Vlc Media Player Mitigation only Fix from $1,9502008-10-22 HIGH 9.3 CVE-2008-4654EPSS 58% Stack-based buffer overflow in the parse_master function in the Ty demux plugin (modules/demux/ty.c) in VLC Media Player 0.9.0 through 0.9.4 allows r… Vlc Media Player No fix yet Fix from $1,9502008-10-22 MEDIUM 6.8 CVE-2008-4558EPSS 8% Array index error in VLC media player 0.9.2 allows remote attackers to overwrite arbitrary memory and execute arbitrary code via an XSPF playlist fil… Vlc Media Player No fix yet Fix from $1,6002008-10-15 MEDIUM 6.8 CVE-2008-3794EPSS 11% Integer signedness error in the mms_ReceiveCommand function in modules/access/mms/mmstu.c in VLC Media Player 0.8.6i allows remote attackers to execu… Vlc Media Player No fix yet Fix from $1,6002008-08-26 HIGH 9.3 CVE-2008-3732EPSS 13% Integer overflow in the Open function in modules/demux/tta.c in VLC Media Player 0.8.6i allows remote attackers to cause a denial of service (applica… Vlc Media Player No fix yet Fix from $1,9502008-08-20 HIGH 9.3 CVE-2008-2430EPSS 6% Integer overflow in the Open function in modules/demux/wav.c in VLC Media Player 0.8.6h on Windows allows remote attackers to execute arbitrary code … Vlc Media Player Mitigation only Fix from $1,9502008-07-07 MEDIUM 6.8 CVE-2008-1768 Multiple integer overflows in VLC before 0.8.6f allow remote attackers to cause a denial of service (crash) via the (1) MP4 demuxer, (2) Real demuxer… Vlc Mitigation only Fix from $1,6002008-04-25 MEDIUM 6.8 CVE-2008-1769EPSS 7% VLC before 0.8.6f allow remote attackers to cause a denial of service (crash) via a crafted Cinepak file that triggers an out-of-bounds array access … Vlc Mitigation only Fix from $1,6002008-04-25 MEDIUM 6.8 CVE-2008-1881EPSS 12% Stack-based buffer overflow in the ParseSSA function (modules/demux/subtitle.c) in VLC 0.8.6e allows remote attackers to execute arbitrary code via a… Vlc No fix yet Fix from $1,6002008-04-17 MEDIUM 6.8 CVE-2008-1489EPSS 12% Integer overflow in the MP4_ReadBox_rdrf function in libmp4.c for VLC 0.8.6e allows remote attackers to cause a denial of service (crash) and possibl… Vlc No fix yet Fix from $1,6002008-03-25 MEDIUM 5.0 CVE-2007-6683 The browser plugin in VideoLAN VLC 0.8.6d allows remote attackers to overwrite arbitrary files via (1) the :demuxdump-file option in a filename in a … Vlc No fix yet Fix from $1,6002008-01-17 MEDIUM 5.0 CVE-2007-6684 The RTSP module in VideoLAN VLC 0.8.6d allows remote attackers to cause a denial of service (crash) via a request without a Transport parameter, whic… Vlc Mitigation only Fix from $1,6002008-01-17