A vulnerability in EbmlTypeDispatcher::send in VideoLAN VLC media player 3.0.11 allows attackers to trigger a heap-based buffer overflow via a crafted .mkv file.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade vlc | Aug 22, 2024 | Jan 8, 2021 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Jan 8, 2021 |
| Debian | — | Upgrade vlc | Jan 25, 2021 | Jan 8, 2021 |
| Gentoo Linux | — | Upgrade media-video/vlc. | Jan 29, 2021 | Jan 8, 2021 |
| Suse | — | Upgrade vlc-develUpgrade libvlc5Upgrade vlc-codec-gstreamerUpgrade vlcUpgrade vlc-vdpauUpgrade vlc-langUpgrade libvlccore9Upgrade vlc-qtUpgrade vlc-jackUpgrade vlc-opencvUpgrade vlc-nox | Jan 18, 2021 | Jan 8, 2021 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub