CVE-2012-0023

no score yetEPSS 4.9%

videolan vlc media player: no CVSS score yet. EPSS 4.9% chance of exploitation in the next 30 days.

Double free vulnerability in the get_chunk_header function in modules/demux/ty.c in VideoLAN VLC media player 0.9.0 through 1.1.12 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted TiVo (TY) file.

EPSS: 4.9% chance of exploitation in the next 30 days; higher than 92% of CVEs (scores of 2026-11-01)
CWE: CWE-399
Published: 2012-10-30
Modified: 2026-06-16
Record from: the NVD, synced 2026-10-19

Affected

videolan:vlc_media_player

References

http://git.videolan.org/?p=vlc.git%3Ba=commit%3Bh=7d282fac1cc455b5a5eca2bb56375efcbf879b06
http://secunia.com/advisories/47325
http://securitytracker.com/id?1026449
http://www.openwall.com/lists/oss-security/2012/10/29/5
http://www.openwall.com/lists/oss-security/2012/10/30/9

Check your stack JSON