Do Son Two VLC media player vulnerabilities (CVE-2026-56711, CVE-2026-73324) allow heap out-of-bounds write and read. No patch is available yet.
VLC media player
URGENT: Update your VLC media player now! Don't risk crashes or code execution. Learn about CVE-2024-46461 and protect yourself.
The first of the two vulnerabilities patched in this release, identified as CVE-2023-47359, carries a high CVSS score of 9.8
VLC media player contains two security vulnerabilities that could be exploited by attackers to take control of users' computers.
CVE-2022-41325 is a buffer overflow that resides in the vnc module and can be triggered using a malicious vnc URL.