Known vulnerabilities in VLC Media Player

Vendor: VideoLAN
Software CPE: cpe:2.3:a:videolan:vlc:*:*:*:*:*:*:*:*
Total vulnerabilities: 70
Public exploits: 8
Known exploited (KEV): 2

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting VLC Media Player VLC Media Player is affected by 70 known vulnerabilities: 1 critical, 21 high, 24 medium, 24 low Critical High Medium Low

Vulnerabilities (70)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU153083 - Memory corruption
CVE-2026-56711
CWE-119 High
No
No
3.0.24 01.10.2026 SB2026100180
SB2026100182
SB2026100183
and 2 more
#VU153082 - Memory corruption
CVE-2026-73324
CWE-119 High
No
No
3.0.24 01.10.2026 SB2026100180
SB2026100182
SB2026100183
and 2 more
#VU153072 - Heap-based Buffer Overflow
CWE-122 Medium
No
No
3.0.24 01.10.2026 SB2026100180
#VU153073 - Integer overflow
CWE-190 Medium
No
No
3.0.24 01.10.2026 SB2026100180
#VU153074 - Heap-based Buffer Overflow
CWE-122 Medium
No
No
3.0.24 01.10.2026 SB2026100180
#VU153075 - Out-of-bounds read
CWE-125 Low
No
No
3.0.24 01.10.2026 SB2026100180
#VU153076 - Out-of-bounds write
CWE-787 Medium
No
No
3.0.24 01.10.2026 SB2026100180
#VU153077 - Integer overflow
CWE-190 Medium
No
No
3.0.24 01.10.2026 SB2026100180
#VU153078 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CWE-22 Medium
No
No
3.0.24 01.10.2026 SB2026100180
#VU153079 - Heap-based Buffer Overflow
CWE-122 Medium
No
No
3.0.24 01.10.2026 SB2026100180
#VU153080 - Exposure of sensitive information to an unauthorized actor
CWE-200 Medium
No
No
3.0.24 01.10.2026 SB2026100180
#VU153081 - Command injection
CWE-77 Medium
No
No
3.0.24 01.10.2026 SB2026100180
#VU121108 - Memory corruption
CVE-2025-51602
CWE-119 High
No
No
3.0.22 08.01.2026 SB2026010845
SB2026011275
#VU91598 - Heap-based Buffer Overflow
CVE-2024-46461
CWE-122 High
No
No
3.0.21 10.06.2024 SB2024061025
SB20240711163
SB2025013031
#VU83640 - Integer underflow
CVE-2023-47360
CWE-191 Low
No
No
3.0.20 04.12.2023 SB2023110303
SB2024052312
#VU82697 - Out-of-bounds write
CVE-2023-47359
CWE-787 High
No
No
3.0.20 03.11.2023 SB2023110303
SB2023110313
SB2024052312
#VU82696 - Untrusted Search Path
CVE-2023-46814
CWE-426 Low
No
No
3.0.19 03.11.2023 SB2023110302
#VU81244 - Heap-based Buffer Overflow
CVE-2023-5217
CWE-122 Critical
Available
Exploited
3.0.19 27.09.2023 SB2023092804
SB2023092847
SB2023092851
and 101 more
#VU66153 - Heap-based Buffer Overflow
CVE-2022-37434
CWE-122 High
Available
No
3.0.19 07.08.2022 SB2022080705
SB2022081833
SB2022081851
and 154 more
#VU23 - Memory corruption
CVE-2016-5108
CWE-119 High
Available
No
2.2.4 24.06.2016 SB2016062501
SB2016060801
SB2017011702
and 2 more


Showing elements 1 - 20 out of 70