Vlc Media Player
135 CVEs tracked. None of them is in CISA KEV.
This hub aggregates every CVE we track for Vlc Media Player, a product in the consumer software space. Use it to gauge the current risk picture and drill into individual advisories.
Vlc Media Player CVEs per month
| Month | CVEs |
|---|---|
| 2024-10 | 0 |
| 2024-11 | 0 |
| 2024-12 | 0 |
| 2025-01 | 0 |
| 2025-02 | 0 |
| 2025-03 | 0 |
| 2025-04 | 0 |
| 2025-05 | 0 |
| 2025-06 | 0 |
| 2025-07 | 0 |
| 2025-08 | 0 |
| 2025-09 | 0 |
| 2025-10 | 0 |
| 2025-11 | 0 |
| 2025-12 | 0 |
| 2026-01 | 1 |
| 2026-02 | 0 |
| 2026-03 | 0 |
| 2026-04 | 0 |
| 2026-05 | 0 |
| 2026-06 | 0 |
| 2026-07 | 0 |
| 2026-08 | 0 |
| 2026-09 | 2 |
Severity
How the 135 CVEs score on CVSS. Severity is not exploitation: KEV is counted above.
- Critical31
- High58
- Medium46
Latest CVEs
The 15 most recently published vulnerabilities affecting Vlc Media Player.
- CVE-2026-73324VLC media player 3.0.0 through 3.0.23 information disclosure vulnerability4.3
- CVE-2026-56711VLC media player 3.0.0 through 3.0.23 memory corruption vulnerability7.0
- CVE-2025-51602mmstu.c in VideoLAN VLC media player before 3.0.22 allows an out-of-bounds read and denial of service via a crafted 0x01 response from an MMS server.4.8
- CVE-2024-46461VLC media player 3.0.20 and earlier is vulnerable to denial of service through an integer overflow which could be triggered with a maliciously crafted mms stream (heap based overflow). If successfu...8.0
- BDU:2024-04400Уязвимость обработчика MMS программы-медиапроигрывателя VideoLAN VLC, позволяющая нарушителю оказать влияние на конфиденциальность, целостность и доступность защищаемой информации7.1
- CVE-2023-46814A binary hijacking vulnerability exists within the VideoLAN VLC media player before 3.0.19 on Windows. The uninstaller attempts to execute code with elevated privileges out of a standard user writa...7.8
- CVE-2023-47359Videolan VLC prior to version 3.0.20 contains an incorrect offset read that leads to a Heap-Based Buffer Overflow in function GetPacket() and results in a memory corruption.9.8
- CVE-2023-47360Videolan VLC prior to version 3.0.20 contains an Integer underflow that leads to an incorrect packet length.7.5
- CVE-2022-41325An integer overflow in the VNC module in VideoLAN VLC Media Player through 3.0.17.4 allows attackers, by tricking a user into opening a crafted playlist or connecting to a rogue VNC server, to cras...7.8
- CVE-2021-25804A NULL-pointer dereference in "Open" in avi.c of VideoLAN VLC Media Player 3.0.11 can a denial of service (DOS) in the application.7.5
- CVE-2021-25803A buffer overflow vulnerability in the vlc_input_attachment_New component of VideoLAN VLC Media Player 3.0.11 allows attackers to cause an out-of-bounds read via a crafted .avi file.7.1
- CVE-2021-25802A buffer overflow vulnerability in the AVI_ExtractSubtitle component of VideoLAN VLC Media Player 3.0.11 allows attackers to cause an out-of-bounds read via a crafted .avi file.7.1
- CVE-2021-25801A buffer overflow vulnerability in the __Parse_indx component of VideoLAN VLC Media Player 3.0.11 allows attackers to cause an out-of-bounds read via a crafted .avi file.7.1
- BDU:2021-02575Уязвимость программы-медиапроигрывателя VideoLAN VLC, существующая из-за недостаточной проверки входных данных, позволяющая нарушителю выполнить произвольный код7.1
- CVE-2021-3185A flaw was found in the gstreamer h264 component of gst-plugins-bad before v1.18.1 where when parsing a h264 header, an attacker could cause the stack to be smashed, memory corruption and possibly ...9.8
Product grouping is registry-driven, with AI assist and human review. How it works