Cette page suit l'état du correctif pour Debian. La vulnérabilité elle-même est décrite sur la page CVE principale. Voir CVE-2026-56711 →

DEBIAN-CVE-2026-56711

VLC media player versions 3.0.0 through 3.0.23 contain a memory-safety vulnerability reachable when processing crafted media. Exploitation requires us...

Description d'origine

La description telle que publiée par la source (souvent en anglais).

VLC media player versions 3.0.0 through 3.0.23 contain a memory-safety vulnerability reachable when processing crafted media. Exploitation requires user interaction and may result in application termination or code execution with the privileges of the VLC process.

Source: OSV.dev (Open Source Vulnerabilities) OSV

Paquets affectés

Debian:12 vlc

[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}]

Debian:13 vlc

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.24-0+deb13u1"}]}]

Debian:14 vlc

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.24-1"}]}]

Références

advisory security-tracker.debian.org