Software Watch

VideoLAN の脆弱性情報

配布元の告知ページ

告知公開日重大度CVE
Multiple vulnerabilities fixed in VLC media player 3.0.24 VideoLAN-SB-VLC-324

AI VLC media player に複数の脆弱性が存在し、3.0.24 で修正される。

修正版 3.0.24

固定リンク
2026-10-01——
Vulnerability fixed in VLC-iOS 3.5.9 VideoLAN-SB-VLC-iOS-359———
Vulnerabilities fixed in VLC media player 3.0.22 VideoLAN-SB-VLC-322———
Vulnerability fixed in VLC media player 3.0.21 VideoLAN-SB-VLC-321———
Vulnerability fixed in VLC media player 3.0.20 VideoLAN-SB-VLC-320———
Vulnerability fixed in VLC media player 3.0.19 VideoLAN-SB-VLC-319———
Multiple vulnerabilities fixed in VLC media player 3.0.18 VideoLAN-SB-VLC-318———
Multiple vulnerabilities fixed in VLC media player 3.0.13 VideoLAN-SB-VLC-313———
Multiple vulnerabilities fixed in VLC media player 3.0.12 VideoLAN-SB-VLC-312———
Multiple vulnerabilities fixed in VLC media player 3.0.11 VideoLAN-SB-VLC-311———
Multiple vulnerabilities fixed in VLC media player 3.0.9/3.0.10 VideoLAN-SB-VLC-309———
Multiple vulnerabilities fixed in VLC media player 3.0.8 VideoLAN-SB-VLC-308———
Buffer overflow in avi demuxer & heap use after free in mkv demuxer VideoLAN-SA-1901———
Heap use after free in avformat demuxer VideoLAN-SA-1801———
Buffer Overflow in Processing QuickTime IMA Files VideoLAN-SA-1601———
Multiple heap and buffer overflows VideoLAN-SA-1501———
(CVE-2013-1954) Overflow in ASF Demuxer VideoLAN-SA-1302——CVE-2013-1954
Overflow in subtitles decoder VideoLAN-SA-1301———
(CVE-2012-5470) Overflow in PNG decoder VideoLAN-SA-1203——CVE-2012-5470
(CVE-2012-1776) Heap overflows in Real RTPS protocol VideoLAN-SA-1202——CVE-2012-1776
(CVE-2012-1775) Stack overflow in MMS protocol VideoLAN-SA-1201——CVE-2012-1775
(CVE-2012-0023) Heap corruption in TiVo demuxer. VideoLAN-SA-1108——CVE-2012-0023
(CVE-2011-3333) NULL dereference in HTTP and RTSP server. VideoLAN-SA-1107——CVE-2011-3333
(CVE-2011-2588) Heap buffer overflow in AVI demuxer. VideoLAN-SA-1106——CVE-2011-2588
(CVE-2011-2587) Heap buffer overflow in RealMedia demuxer. VideoLAN-SA-1105——CVE-2011-2587
(CVE-2011-2194) Integer overflow in XSPF demuxer. VideoLAN-SA-1104——CVE-2011-2194
(CVE-2011-1684) Heap corruption in MP4 demuxer. VideoLAN-SA-1103——CVE-2011-1684
(CVE-2011-0531) Insufficient input validation in MKV demuxer. VideoLAN-SA-1102——CVE-2011-0531
(CVE-2011-0021) Heap corruption in CDG codec. VideoLAN-SA-1101——CVE-2011-0021
(CVE-2010-3907) Buffer overflow in Real Media demuxer. VideoLAN-SA-1007——CVE-2010-3907
Stack smashing in SMB/CIFS access. VideoLAN-SA-1006———
(CVE-2010-3124) DLL preloading vulnerability. VideoLAN-SA-1005——CVE-2010-3124
(CVE-2010-2937) Insufficient input validation VLC TagLib plugin. VideoLAN-SA-1004——CVE-2010-2937
(CVE-2010-1441..5) Multiple vulnerabilities in VLC. VideoLAN-SA-1003——CVE-2010-1441
Buffer overflow in ancient VLC media player VideoLAN-SA-1002———
Clam AntiVirus input validation error VideoLAN-SA-1001———
Stack overflows in VLC demuxers. VideoLAN-SA-0901———
(CVE-2008-5276) Buffer overflows in VLC Real demuxers. VideoLAN-SA-0811——CVE-2008-5276
(CVE-2008-5032, CVE-2008-5036) Multiple overflows in VLC demuxers. VideoLAN-SA-0810——CVE-2008-5032, CVE-2008-5036
(CVE-2008-4654, CVE-2008-4686) Buffer overflow in VLC TiVo demuxer. VideoLAN-SA-0809——CVE-2008-4654, CVE-2008-4686
(CVE-2008-3732, CVE-2008-3794) Multiple overflows in VLC demuxers. VideoLAN-SA-0807——CVE-2008-3732, CVE-2008-3794
(CVE-2008-2430) Arbitrary code execution through potential heap-overflows in VLC's WAV demuxer. VideoLAN-SA-0806——CVE-2008-2430
(CVE-2008-2147) Arbitrary code execution through rogue VLC plugins in the current directory. VideoLAN-SA-0805——CVE-2008-2147
(CVE-2007-6683) Arbitrary file overwrite and other abuses through M3U parser and browsers plugins. VideoLAN-SA-0804——CVE-2007-6683
(CVE-2008-0073, CVE-2008-1489, CVE-2008-1768, CVE-2008-1769) Arbitrary memory overwrite vulnerabilities in multiple modules: Real RTSP demuxer, Real Media demuxer, MP4 demuxer, Cinepak decoder. VideoLAN-SA-0803——CVE-2008-0073, CVE-2008-1489, CVE-2008-1768 ほか 1 件
(CVE-2007-6681, CVE-2007-6682, CVE-2008-0295, CVE-2008-0296) Format string vulnerability in the Web interface. Stack-based buffer overflow in the Subtitles demuxer. String buffer overflows in the Real RTSP demuxer. VideoLAN-SA-0801——CVE-2007-6681, CVE-2007-6682, CVE-2008-0295 ほか 1 件
(CVE-2007-3316) Format string injection in Vorbis, Theora, SAP and CDDA plugins. VideoLAN-SA-0702——CVE-2007-3316

47 件。配布元が出した告知をそのまま並べたもので、製品の版とはまだ結び付けていません。

こちらで見つけた日

このサイトが更新に気づいた日です。実際に公開された日は、これより前のことがあります。

まだ来ていない日付

配布元が将来の日付で公開しています。予定として書かれていることも、時差の都合でそう見えることもあります。