CVE-2008-1768: Videolan Vlc

Medium severity, CVSS 6.8. EPSS: 2.7% chance of exploitation in the next 30 days.

Multiple integer overflows in VLC before 0.8.6f allow remote attackers to cause a denial of service (crash) via the (1) MP4 demuxer, (2) Real demuxer, and (3) Cinepak codec, which triggers a buffer overflow.

Affected products

• Videolan Vlc: version 0.1.99 only; version 0.1.99a only; version 0.1.99b only; version 0.1.99c only; version 0.1.99d only; version 0.1.99e only; …

Published 2008-04-25. Last modified 2026-06-16.