CVE-2026-73324 — VLC media player 3.0.0 through 3.0.23 information disclosure vulnerability

CVE-2026-73324

VLC media player 3.0.0 through 3.0.23 information disclosure vulnerability PUBLISHED

Description (CNA)

Certain VLC media player builds in versions 3.0.0 through 3.0.23 contain a memory-safety vulnerability reachable when processing media from an attacker-controlled network source. Exploitation requires user interaction and may disclose a limited, layout-dependent amount of VLC process memory. Exposure depends on build configuration.

Affected (CNA)

Vendor / product	Versions
VideoLAN / VLC media player	affected 3.0.0 through 3.0.23

CWE

CWE-125, CWE-170

References

https://github.com/videolan/vlc

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.