Threat Intelligence Database

Certain VLC media player versions 3.0.0 through 3.0.23 contain a memory-safety vulnerability that can lead to an out-of-bounds read when processing media from attacker-controlled network sources. Exploitation requires user interaction and may disclose a limited amount of VLC process memory depending on the build configuration. The vulnerability has a medium severity rating with a CVSS score of 5.3.

VLC media player versions 3.0.0 through 3.0.23 contain a memory-safety vulnerability due to an integer overflow or wraparound when processing crafted media files. Exploitation requires user interaction and may lead to application termination or code execution with the privileges of the VLC process. The vulnerability has a high severity score of 7.3 CVSS v4.0.