CVE-2023-47359

Videolan VLC prior to version 3.0.20 contains an incorrect offset read that leads to a Heap-Based Buffer Overflow in function GetPacket() and results in a memory corruption.

critical 9.8 CVSS 3.1
Published: Nov 7, 2023
Modified: May 28, 2026
Vendor: Videolan
Product: Vlc Media Player

Description

Videolan VLC prior to version 3.0.20 contains an incorrect offset read that leads to a Heap-Based Buffer Overflow in function GetPacket() and results in a memory corruption.

References

Related CVEs

CVE-2023-47360 high · 7.5
Videolan VLC prior to version 3.0.20 contains an Integer underflow that leads to an incorrect packet length.