CVE-2011-1684

no score yetEPSS 4.6%

Heap-based buffer overflow in the MP4_ReadBox_skcr function in libmp4.c in the MP4 demultiplexer in VideoLAN VLC media player 1.x before 1.1.9 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted MP4 file.

EPSS: 4.6% chance of exploitation in the next 30 days; higher than 91% of CVEs (scores of 2026-10-31)
CWE: CWE-119
Published: 2011-05-03
Modified: 2026-06-16
Record from: the NVD, synced 2026-10-19

Affected

videolan:vlc_media_player

References

http://git.videolan.org/?p=vlc.git%3Ba=commit%3Bh=5637ca8141bf39f263ecdb62035d2cb45c740821
http://openwall.com/lists/oss-security/2011/04/11/17
http://openwall.com/lists/oss-security/2011/04/13/14
http://openwall.com/lists/oss-security/2011/04/13/17
http://secunia.com/advisories/43890

Check your stack JSON