Search for packages
| purl | pkg:deb/debian/vlc@3.0.17.4-0%2Bdeb10u1 |
| Next non-vulnerable version | 3.0.21-0+deb11u1 |
| Latest non-vulnerable version | 3.0.21-0+deb11u1 |
| Risk | 4.4 |
| Vulnerability | Summary | Fixed by |
|---|---|---|
|
VCID-4ygc-xk6x-5qb5
Aliases: CVE-2023-47360 |
Videolan VLC prior to version 3.0.20 contains an Integer underflow that leads to an incorrect packet length. |
Affected by 0 other vulnerabilities. |
|
VCID-naqh-vqhq-b3hw
Aliases: CVE-2024-46461 |
VLC media player 3.0.20 and earlier is vulnerable to denial of service through an integer overflow which could be triggered with a maliciously crafted mms stream (heap based overflow). If successful, a malicious third party could trigger either a crash of VLC or an arbitrary code execution with the target user's privileges. |
Affected by 0 other vulnerabilities. |
|
VCID-skzz-xkdf-xbhw
Aliases: CVE-2022-41325 |
An integer overflow in the VNC module in VideoLAN VLC Media Player through 3.0.17.4 allows attackers, by tricking a user into opening a crafted playlist or connecting to a rogue VNC server, to crash VLC or execute code under some conditions. |
Affected by 0 other vulnerabilities. |
|
VCID-ugj8-kgfn-dbhw
Aliases: CVE-2023-47359 |
Videolan VLC prior to version 3.0.20 contains an incorrect offset read that leads to a Heap-Based Buffer Overflow in function GetPacket() and results in a memory corruption. |
Affected by 0 other vulnerabilities. |
|
VCID-wek2-y3ku-pbbs
Aliases: DSA-5165-1 vlc |
security update |
Affected by 0 other vulnerabilities. |
| Vulnerability | Summary | Aliases |
|---|---|---|
| VCID-2a68-4wtr-7ke1 | A buffer overflow vulnerability in the vlc_input_attachment_New component of VideoLAN VLC Media Player 3.0.11 allows attackers to cause an out-of-bounds read via a crafted .avi file. |
CVE-2021-25803
|
| VCID-cyj2-72nh-3kgf | A buffer overflow vulnerability in the __Parse_indx component of VideoLAN VLC Media Player 3.0.11 allows attackers to cause an out-of-bounds read via a crafted .avi file. |
CVE-2021-25801
|
| VCID-g4af-hnmu-v3bm | A vulnerability in EbmlTypeDispatcher::send in VideoLAN VLC media player 3.0.11 allows attackers to trigger a heap-based buffer overflow via a crafted .mkv file. |
CVE-2020-26664
|
| VCID-gb3v-b7nc-ukc2 | A NULL-pointer dereference in "Open" in avi.c of VideoLAN VLC Media Player 3.0.11 can a denial of service (DOS) in the application. |
CVE-2021-25804
|
| VCID-hmyn-3jkb-vqd6 | A heap-based buffer overflow in the hxxx_AnnexB_to_xVC function in modules/packetizer/hxxx_nal.c in VideoLAN VLC media player before 3.0.11 for macOS/iOS allows remote attackers to cause a denial of service (application crash) or execute arbitrary code via a crafted H.264 Annex-B video (.avi for example) file. |
CVE-2020-13428
|
| VCID-p71q-2a5r-eydb | A buffer overflow vulnerability in the AVI_ExtractSubtitle component of VideoLAN VLC Media Player 3.0.11 allows attackers to cause an out-of-bounds read via a crafted .avi file. |
CVE-2021-25802
|
| VCID-wek2-y3ku-pbbs | security update |
DSA-5165-1 vlc
|