CVE-2026-56711

7.3 highEPSS 0.1%

High (7.3). EPSS 0.1% chance of exploitation in the next 30 days.

VLC media player versions 3.0.0 through 3.0.23 contain a memory-safety vulnerability reachable when processing crafted media. Exploitation requires user interaction and may result in application termination or code execution with the privileges of the VLC process.

Severity

CVSS 4.0

7.3 high

CVSS:4.0/AV:L/AC:H/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

CVSS 3.1

7.0 high

CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H

EPSS: 0.1% chance of exploitation in the next 30 days; higher than 1% of CVEs (scores of 2026-10-31)
CWEs: CWE-190, CWE-787
Published: 2026-09-09
Modified: 2026-09-18
Record from: the NVD, synced 2026-10-19

References

https://github.com/videolan/vlc

Check your stack JSON