Skip to content
OpenAdvisories

Vendor

VideoLAN

16 known vulnerabilities.

Products

vlc 5 VLC for Android 3 VLC media player 3 libbluray 2 libdvdnav 2 dav1d 1
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Low 2.9
    CVE-2026-115724

    VLC for Android before 3.7.2 File Overwrite via Spoofed Mail Attachment Provider

    VLC for Android before 3.7.2 contains a confused-deputy file overwrite vulnerability in FileUtils.getUri() that trusts content URIs based only on the com.fsck.k9.attachmentprovider or gmail-ls authority. A co-installed app without permissions can declare thes…

    VideoLAN VLC for Android Android
  • Low 3.7
    CVE-2026-26227

    VLC for Android < 3.7.0 Remote Access OTP Authentication Bypass

    VideoLAN VLC for Android prior to version 3.7.0 contains an authentication bypass in the Remote Access Server feature due to missing or insufficient rate limiting on one-time password (OTP) verification. The Remote Access Server uses a 4-digit OTP and does no…

    VideoLAN VLC for Android Android