A vulnerability in EbmlTypeDispatcher::send in VideoLAN VLC media player 3.0.11 allows attackers to trigger a heap-based buffer overflow via a crafted .mkv file.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade vlc | Aug 22, 2024 | Jan 8, 2021 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Jan 8, 2021 |
| Debian | — | Upgrade vlc | Jan 25, 2021 | Jan 8, 2021 |
| Gentoo Linux | — | Upgrade media-video/vlc. | Jan 29, 2021 | Jan 8, 2021 |
| Suse | — | Upgrade vlc-jackUpgrade vlc-qtUpgrade vlc-opencvUpgrade vlc-langUpgrade libvlccore9Upgrade vlc-noxUpgrade vlcUpgrade vlc-codec-gstreamerUpgrade vlc-develUpgrade libvlc5Upgrade vlc-vdpau | Jan 18, 2021 | Jan 8, 2021 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub