Skip to content
OpenAdvisories
Unscored DSA-4045-1 2 CVEs

vlc - security update

Published Nov 21, 2017 · Updated Mar 9, 2026

Fixed packages 2

ReleasePackageFixed in
Debian · 8 vlc 2.2.7-1~deb8u1
Debian · 9 vlc 2.2.7-1~deb9u1

Vulnerabilities 2

  • Unscored —

    avcodec 2.2.x, as used in VideoLAN VLC media player 2.2.7-x before 2017-06-29, allows out-of-bounds heap memory write d…

  • Unscored —

    plugins\codec\libflac_plugin.dll in VideoLAN VLC media player 2.2.4 allows remote attackers to cause a denial of servic…