Out-of-Bounds Read Vulnerability in VideoLAN VLC Media Player
CVE-2025-51602

4.8MEDIUM

Key Information:

Vendor

Videolan
Status
Vlc Media Player
Vendor
CVE Published:
16 January 2026

What is CVE-2025-51602?

The VideoLAN VLC media player prior to version 3.0.22 has a vulnerability that allows an attacker to exploit out-of-bounds read conditions. This can lead to a denial of service when the software receives a specific crafted 0x01 response from an MMS server, potentially disrupting user access and experience.

Affected Version(s)

VLC media player 0 < 3.0.22

References

https://www.videolan.org/security/sb-vlc3022.html
https://code.videolan.org/videolan/vlc/-/issues/29146

CVSS V3.1

Score:
4.8
Severity:
MEDIUM
Confidentiality:
None
Integrity:
Low
Availability:
None
Attack Vector:
Network
Attack Complexity:
High
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.