[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fxCIq0x67iJtqY8T3ApksHcwDEt3kDNxdOt7_EFY7fuA":3},{"success":4,"data":5},true,{"vendor":6,"topVulnerabilitiesByEpss":45,"kevVulnerabilities":106,"topProductsByCves":107,"seoMetadata":113,"meta":122},{"vendorId":7,"vendorName":8,"productCount":9,"cveCount":10,"kevCount":11,"versionCount":12,"lastCveUpdate":13,"firstLetter":14,"products":15,"description":44},33778,"videolan",5,127,0,292,"2024-02-19","v",[16,22,28,33,39],{"id":17,"product_name":18,"version_count":19,"cve_count":20,"kev_count":11,"last_cve_update":21},168092,"vlc_media_player",158,113,"2023-11-22",{"id":23,"product_name":24,"version_count":25,"cve_count":26,"kev_count":11,"last_cve_update":27},168090,"vlc",62,10,"2017-03-28",{"id":29,"product_name":30,"version_count":31,"cve_count":32,"kev_count":11,"last_cve_update":13},168088,"dav1d",23,2,{"id":34,"product_name":35,"version_count":36,"cve_count":37,"kev_count":11,"last_cve_update":38},168089,"libbluray",22,1,"2019-11-22",{"id":40,"product_name":41,"version_count":42,"cve_count":37,"kev_count":11,"last_cve_update":43},168091,"vlc_for_mobile",27,"2018-12-31","Videolan is a technology vendor with 5 tracked products and 127 known security vulnerabilities. Get comprehensive security analysis, vulnerability tracking, and threat intelligence for this vendor.",[46,55,60,67,72,76,81,89,94,100],{"cveId":47,"description":48,"publishedDate":49,"cvssScore":50,"cvssVersion":51,"severity":52,"isKev":53,"epssScore":54},"CVE-2010-3275","libdirectx_plugin.dll in VideoLAN VLC Media Player before 1.1.8 allows remote attackers to execute arbitrary code via a crafted width in an AMV file, related to a \"dangling pointer vulnerability.\"","2011-03-28",9.3,"v2","Critical",false,0.75515,{"cveId":56,"description":57,"publishedDate":58,"cvssScore":50,"cvssVersion":51,"severity":52,"isKev":53,"epssScore":59},"CVE-2008-4654","Stack-based buffer overflow in the parse_master function in the Ty demux plugin (modules\u002Fdemux\u002Fty.c) in VLC Media Player 0.9.0 through 0.9.4 allows remote attackers to execute arbitrary code via a TiVo TY media file with a header containing a crafted size value.","2008-10-22",0.57547,{"cveId":61,"description":62,"publishedDate":63,"cvssScore":64,"cvssVersion":51,"severity":65,"isKev":53,"epssScore":66},"CVE-2011-0522","The StripTags function in (1) the USF decoder (modules\u002Fcodec\u002Fsubtitles\u002Fsubsdec.c) and (2) the Text decoder (modules\u002Fcodec\u002Fsubtitles\u002Fsubsusf.c) in VideoLAN VLC Media Player 1.1 before 1.1.6-rc allows remote attackers to execute arbitrary code via a subtitle with an opening \"\u003C\" without a closing \">\" in an MKV file, which triggers heap memory corruption, as demonstrated using refined-australia-blu720p-sample.mkv.","2011-02-07",6.8,"Medium",0.51538,{"cveId":68,"description":69,"publishedDate":70,"cvssScore":50,"cvssVersion":51,"severity":52,"isKev":53,"epssScore":71},"CVE-2012-1775","Stack-based buffer overflow in VideoLAN VLC media player before 2.0.1 allows remote attackers to execute arbitrary code via a crafted MMS:\u002F\u002F stream.","2012-03-19",0.44115,{"cveId":73,"description":74,"publishedDate":63,"cvssScore":50,"cvssVersion":51,"severity":52,"isKev":53,"epssScore":75},"CVE-2011-0531","demux\u002Fmkv\u002Fmkv.hpp in the MKV demuxer plugin in VideoLAN VLC media player 1.1.6.1 and earlier allows remote attackers to cause a denial of service (crash) and execute arbitrary commands via a crafted MKV (WebM or Matroska) file that triggers memory corruption, related to \"class mismatching\" and the MKV_IS_ID macro.",0.4185,{"cveId":77,"description":78,"publishedDate":79,"cvssScore":50,"cvssVersion":51,"severity":52,"isKev":53,"epssScore":80},"CVE-2008-5036","Stack-based buffer overflow in VideoLAN VLC media player 0.9.x before 0.9.6 might allow user-assisted attackers to execute arbitrary code via an an invalid RealText (rt) subtitle file, related to the ParseRealText function in modules\u002Fdemux\u002Fsubtitle.c.  NOTE: this issue was SPLIT from CVE-2008-5032 on 20081110.","2008-11-10",0.41444,{"cveId":82,"description":83,"publishedDate":84,"cvssScore":85,"cvssVersion":86,"severity":87,"isKev":53,"epssScore":88},"CVE-2018-11529","VideoLAN VLC media player 2.2.x is prone to a use after free vulnerability which an attacker can leverage to execute arbitrary code via crafted MKV files. Failed exploit attempts will likely result in denial of service conditions.","2018-07-11",8,"v3.0","High",0.36967,{"cveId":90,"description":91,"publishedDate":92,"cvssScore":50,"cvssVersion":51,"severity":52,"isKev":53,"epssScore":93},"CVE-2009-2484","Stack-based buffer overflow in the Win32AddConnection function in modules\u002Faccess\u002Fsmb.c in VideoLAN VLC media player 0.9.9, when running on Microsoft Windows, allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a long smb URI in a playlist file.","2009-07-16",0.3511,{"cveId":95,"description":96,"publishedDate":97,"cvssScore":98,"cvssVersion":51,"severity":87,"isKev":53,"epssScore":99},"CVE-2013-6934","The parseRTSPRequestString function in Live Networks Live555 Streaming Media 2013.11.26, as used in VideoLAN VLC Media Player, allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a space character at the beginning of an RTSP message, which triggers an integer underflow, infinite loop, and buffer overflow.  NOTE: this vulnerability exists because of an incomplete fix for CVE-2013-6933.","2014-01-23",7.5,0.28174,{"cveId":101,"description":102,"publishedDate":103,"cvssScore":104,"cvssVersion":86,"severity":52,"isKev":53,"epssScore":105},"CVE-2016-5108","Buffer overflow in the DecodeAdpcmImaQT function in modules\u002Fcodec\u002Fadpcm.c in VideoLAN VLC media player before 2.2.4 allows remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via a crafted QuickTime IMA file.","2016-06-08",9.8,0.24748,[],[108,109,110,111,112],{"id":17,"product_name":18,"version_count":19,"cve_count":20,"kev_count":11,"last_cve_update":21},{"id":23,"product_name":24,"version_count":25,"cve_count":26,"kev_count":11,"last_cve_update":27},{"id":29,"product_name":30,"version_count":31,"cve_count":32,"kev_count":11,"last_cve_update":13},{"id":34,"product_name":35,"version_count":36,"cve_count":37,"kev_count":11,"last_cve_update":38},{"id":40,"product_name":41,"version_count":42,"cve_count":37,"kev_count":11,"last_cve_update":43},{"title":114,"metaDescription":115,"keywords":116,"structuredData":117},"Videolan - Security Vulnerabilities & Analysis | Precursor Intelligence","Comprehensive security analysis for Videolan covering 5 products with 127 tracked vulnerabilities. Real-time threat intelligence, CVE tracking, and security recommendations.","Videolan vulnerabilities, Videolan security, Videolan CVE, Videolan threat intelligence, vendor security analysis, cybersecurity threats, vulnerability management, CVE tracking",{"@context":118,"@type":119,"name":120,"description":115,"url":121},"https:\u002F\u002Fschema.org","Organization","Videolan","https:\u002F\u002Fprecursorintelligence.com\u002Fvendors\u002Fvideolan",{"totalProducts":9,"totalVulnerabilities":10,"kevVulnerabilities":11,"lastUpdated":13,"generatedAt":123,"apiVersion":124},"2026-10-18T13:35:49.134Z","3.0"]