Skip to content
OpenAdvisories
Unscored USN-4805-1 2 CVEs

vlc vulnerabilities

Published Mar 15, 2021 · Updated Jun 29, 2026

Ecosystem: Ubuntu

Summary

It was discovered that VLC mishandled certain crafted media files. An
attacker could use this vulnerability to cause a denial of service (crash)
or possibly execute arbitrary code. This issue only affected Ubuntu 14.04 ESM.
(CVE-2017-10699)

It was discovered that VLC mishandled certain crafted MKV files. An
attacker could use this vulnerability to cause a denial of service (crash)
or possibly execute arbitrary code. (CVE-2018-11529)

Fixed packages 2

ReleasePackageFixed in
Ubuntu · Pro 14.04 LTS Pro:14.04:LTS vlc 2.1.6-0ubuntu14.04.5+esm1
Ubuntu · Pro 16.04 LTS Pro:16.04:LTS vlc 2.2.2-5ubuntu0.16.04.5+esm1

Vulnerabilities 2

  • Unscored —
    CVE-2017-10699

    avcodec 2.2.x, as used in VideoLAN VLC media player 2.2.7-x before 2017-06-29, allows out-of-bounds heap memory write d…

    vlc vlc Debian Ubuntu
  • Unscored —
    CVE-2018-11529 Public exploit EPSS 40%

    VideoLAN VLC media player 2.2.x is prone to a use after free vulnerability which an attacker can leverage to execute ar…

    vlc vlc Debian Ubuntu

References

  • report
    https://ubuntu.com/security/CVE-2017-10699
  • report
    https://ubuntu.com/security/CVE-2018-11529