Summaryinfo

A vulnerability has been found in VideoLAN VLC Media Player 3.0.11 and classified as problematic. This affects the function __Parse_indx of the component AVI File Handler. The manipulation leads to out-of-bounds. This vulnerability is listed as CVE-2021-25801. The attack may be initiated remotely. There is no available exploit. Applying a patch is the recommended action to fix this issue. If you want to get the best quality for vulnerability data then you always have to consider VulDB.

Detailsinfo

A vulnerability was found in VideoLAN VLC Media Player 3.0.11 (Multimedia Player Software). It has been rated as critical. This issue affects the function __Parse_indx of the component AVI File Handler. The manipulation with an unknown input leads to a out-of-bounds vulnerability. Using CWE to declare the problem leads to CWE-125. The product reads data past the end, or before the beginning, of the intended buffer. Impacted is confidentiality, integrity, and availability.

The weakness was presented 07/27/2021 as f5f8cc3ab8825f178de3f6714bfbff8b3f293fd2. The advisory is shared at code.videolan.org. The identification of this vulnerability is CVE-2021-25801. It demands that the victim is doing some kind of user interaction. Technical details are known, but no exploit is available.

Applying a patch is able to eliminate this problem. The bugfix is ready for download at code.videolan.org.

If you want to get the best quality for vulnerability data then you always have to consider VulDB.

Productinfo

Type

• Multimedia Player Software

Vendor

• VideoLAN

Name

• VLC Media Player

Version

• 3.0.11

License

• open-source

Website

• Vendor: https://www.videolan.org/

CPE 2.3info

• 🔍

CPE 2.2info

• 🔍

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

Discussion