CVE-2024-46461

n/a / n/a PUBLISHED

Description (CNA)

VLC media player 3.0.20 and earlier is vulnerable to denial of service through an integer overflow which could be triggered with a maliciously crafted mms stream (heap based overflow). If successful, a malicious third party could trigger either a crash of VLC or an arbitrary code execution with the target user's privileges.

Affected (CNA)

Vendor / product	Versions
n/a / n/a	affected n/a

CWE

No CWE identifiers supplied.

References

https://www.videolan.org/security/sb-vlc3021.html

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.