VVideoLAN

Products

Exploited and recent CVEs

• CVE-2026-115724 Low 2.9 VLC for Android before 3.7.2 File Overwrite via Spoofed Mail Attachment Provider <0.1%
• CVE-2026-112283 Medium 5.5 libbluray through 1.5.1 Uncontrolled Memory Allocation via _parse_extent_start_points 0.2%
• CVE-2026-112282 Medium 5.5 VideoLAN libbluray through 1.5.1 Out-of-Bounds Read via clpi_access_point 0.2%
• CVE-2026-112058 Medium 5.5 libdvdnav through 7.0.0 Out-of-Bounds Read via set_PTT JumpTT 0.2%
• CVE-2026-112057 Medium 5.5 libdvdnav before 7.0.0 Out-of-Bounds Read in dvdnav_describe_title_chapters 0.2%
• CVE-2026-102875 High 7.8 VLC media player before 3.0.24 Path Traversal via skins2 0.2%
• CVE-2026-73324 Medium 4.3 VLC media player 3.0.0 through 3.0.23 information disclosure vulnerability 0.2%
• CVE-2026-56711 High 7.0 VLC media player 3.0.0 through 3.0.23 memory corruption vulnerability 0.1%
• CVE-2026-26227 Low 3.7 VLC for Android < 3.7.0 Remote Access OTP Authentication Bypass 0.3%
• CVE-2026-26228 Medium 4.9 VLC for Android < 3.7.0 Remote Access Path Traversal 0.3%
• CVE-2025-51602 Medium 4.8 mmstu.c in VideoLAN VLC media player before 3.0.22 allows an out-of-bounds read and denial of service via a crafted 0x01 response from an MMS server. 0.4%
• CVE-2024-1580 Medium 5.9 Integer overflow in VideoLAN dav1d 1.8%