CVE-2007-3468: Videolan Vlc Media Player

High severity, CVSS 7.8. EPSS: 2.9% chance of exploitation in the next 30 days.

input.c in VideoLAN VLC Media Player before 0.8.6c allows remote attackers to cause a denial of service (crash) via a crafted WAV file that causes an uninitialized i_nb_resamplers variable to be used.

Affected products

• Videolan Vlc Media Player: up to and including 0.8.6b

Published 2007-06-27. Last modified 2026-06-16.