CVE-2011-0021

no score yetEPSS 5.8%

videolan vlc media player: no CVSS score yet. EPSS 5.8% chance of exploitation in the next 30 days.

Multiple heap-based buffer overflows in cdg.c in the CDG decoder in VideoLAN VLC Media Player before 1.1.6 allow remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted CDG video.

EPSS: 5.8% chance of exploitation in the next 30 days; higher than 93% of CVEs (scores of 2026-10-31)
CWE: CWE-119
Published: 2011-01-25
Modified: 2026-06-16
Record from: the NVD, synced 2026-10-19

Affected

videolan:vlc_media_player

References

http://download.videolan.org/pub/videolan/vlc/1.1.6/vlc-1.1.6.tar.bz2
http://git.videolan.org/?p=vlc.git%3Ba=commit%3Bh=f9b664eac0e1a7bceed9d7b5854fd9fc351b4aab
http://openwall.com/lists/oss-security/2011/01/19/6
http://openwall.com/lists/oss-security/2011/01/20/3
http://www.securityfocus.com/bid/45927

Check your stack JSON