Vlc: Heap-buffer-overflow
Affects vlcSource GCVE Database
Rated High by Threat Radar's AI analysis
- Patch
- Available – fixed in 1558850135d43cf8fe5a500f31d9250410ee6359
Data as of 13 Nov 2026, 19:03 UTC
What to do
Upgrade vlc to 1558850135d43cf8fe5a500f31d9250410ee6359.
Affected software
| Product | Affected | Fixed in |
|---|---|---|
OSS-Fuzzvlcpkg:generic/vlcOther threats | Affected
| Fixed in
|
Check your own hosts for these packages with threat-finder (opens in a new tab), our free open-source scanner.
AI-suggested
A patch is available and should be applied to the affected VLC versions. Users and administrators should update VLC to the fixed version referenced by the commit 1558850135d43cf8fe5a500f31d9250410ee6359 to remediate this vulnerability.
Description
A heap-buffer-overflow vulnerability was identified in the DecodeFrame function of VLC media player. This issue was reported by OSS-Fuzz and involves an out-of-bounds read on the heap during frame decoding. A fix for this vulnerability is available.