Skip to content
OpenAdvisories
High USN-7243-1 1 CVE

vlc vulnerability

Published Jan 30, 2025 · Updated Jun 25, 2026

Ecosystem: Ubuntu

Summary

It was discovered that VLC incorrectly handled memory when reading an MMS
stream. An attacker could possibly use this issue to cause a denial of
service or execute arbitrary code.

Fixed packages 5

ReleasePackageFixed in
Ubuntu · Pro 16.04 LTS Pro:16.04:LTS vlc 2.2.2-5ubuntu0.16.04.5+esm4
Ubuntu · Pro 18.04 LTS Pro:18.04:LTS vlc 3.0.8-0ubuntu18.04.1+esm3
Ubuntu · Pro 20.04 LTS Pro:20.04:LTS vlc 3.0.9.2-1ubuntu0.1~esm3
Ubuntu · Pro 22.04 LTS Pro:22.04:LTS vlc 3.0.16-1ubuntu0.1~esm3
Ubuntu · Pro 24.04 LTS Pro:24.04:LTS vlc 3.0.20-3ubuntu0.1~esm1

Vulnerabilities 1

  • High 8.0
    CVE-2024-46461

    VLC media player 3.0.20 and earlier is vulnerable to denial of service through an integer overflow which could be trigg…

    vlc vlc Debian Ubuntu

References

  • report
    https://ubuntu.com/security/CVE-2024-46461