CVE-2023-47360

Videolan VLC prior to version 3.0.20 contains an Integer underflow that leads to an incorrect packet length.

Score

CVSS 3.1 7.5 High

Status

Modified - cve@mitre.org

Published

2023-11-07

Last modified

2026-05-28

Weaknesses

CWE-191

Affected products

• Vlc Media Player (Videolan)

References

• https://0xariana.github.io/blog/real_bugs/vlc/mms
• https://lists.debian.org/debian-lts-announce/2023/11/msg00034.html