Staging Environment: Content and features may be unstable or change without notice.
Search for vulnerabilities
Vulnerability details: VCID-r6ha-cnd9-8qhv
Vulnerability ID VCID-r6ha-cnd9-8qhv
Aliases CVE-2014-3441
Summary codec\libpng_plugin.dll in VideoLAN VLC Media Player 2.1.3 allows remote attackers to cause a denial of service (crash) via a crafted .png file, as demonstrated by a png in a .wave file.
Status Published
Exploitability None
Weighted Severity None
Risk None
Affected and Fixed Packages Package Details
Weaknesses (0)
There are no known CWE.
System Score Found at
epss 0.07967 https://api.first.org/data/v1/epss?cve=CVE-2014-3441
Reference id Reference type URL
https://api.first.org/data/v1/epss?cve=CVE-2014-3441
CVE-2014-3441;OSVDB-106843 Exploit https://gitlab.com/exploit-database/exploitdb/-/blob/main/exploits/multiple/dos/39177.py
CVE-2014-3441;OSVDB-106843 Exploit https://www.securityfocus.com/bid/67315/info
Data source Exploit-DB
Date added May 9, 2014
Description VideoLAN VLC Media Player 2.1.3 - '.wav' File Memory Corruption
Ransomware campaign use Known
Source publication date May 9, 2014
Exploit type dos
Platform multiple
Source update date Nov. 15, 2016
Source URL https://www.securityfocus.com/bid/67315/info
There are no known vectors.
Exploit Prediction Scoring System (EPSS)
Percentile 0.92191
EPSS Score 0.07967
Published At May 29, 2026, 12:55 p.m.
Date Actor Action Source VulnerableCode Version
2026-05-29T17:16:15.034380+00:00 Debian Importer Import https://security-tracker.debian.org/tracker/data/json 38.6.0