Skip to content
OpenAdvisories
High WID-SEC-2026-3304 2 CVEs

VLC: Mehrere Schwachstellen

Published Sep 9, 2026 · Updated Nov 1, 2026 · Revision 5 · de-DE

Vendor: Debian Vendor: SUSE Product: Linux Product: openSUSE Platform: Windows

Summary

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in VLC ausnutzen, um beliebigen Programmcode auszuführen oder vertrauliche Informationen offenzulegen.

Product

VLC Media Player ist ein Programm zur Wiedergabe von Multimedia-Dateien und Netzwerkstreams.

Vulnerabilities 2

  • High 7.0
    CVE-2026-56711

    VLC media player 3.0.0 through 3.0.23 memory corruption vulnerability

    VLC media player versions 3.0.0 through 3.0.23 contain a memory-safety vulnerability reachable when processing crafted media. Exploitation requires user interaction and may result in application termination or code execution with the privileges of the VLC pro…

    VideoLAN VLC media player vlc vlc Debian Ubuntu
  • Medium 4.3
    CVE-2026-73324

    VLC media player 3.0.0 through 3.0.23 information disclosure vulnerability

    Certain VLC media player builds in versions 3.0.0 through 3.0.23 contain a memory-safety vulnerability reachable when processing media from an attacker-controlled network source. Exploitation requires user interaction and may disclose a limited, layout-depend…

    VideoLAN VLC media player vlc vlc Debian Ubuntu

Revision history

  1. #5

    Neue Updates von openSUSE aufgenommen

  2. #4

    Neue Updates von Debian aufgenommen

  3. #3

    Neue Updates von openSUSE aufgenommen

  4. #2

    Neue Updates von Debian aufgenommen

  5. #1

    Initiale Fassung

References