CVE-2026-56711 — VLC media player 3.0.0 through 3.0.23 memory corruption vulnerability

CVE-2026-56711

VLC media player 3.0.0 through 3.0.23 memory corruption vulnerability PUBLISHED

Description (CNA)

VLC media player versions 3.0.0 through 3.0.23 contain a memory-safety vulnerability reachable when processing crafted media. Exploitation requires user interaction and may result in application termination or code execution with the privileges of the VLC process.

Affected (CNA)

Vendor / product	Versions
VideoLAN / VLC media player	affected 3.0.0 through 3.0.23

CWE

CWE-190, CWE-787

References

https://github.com/videolan/vlc

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.