CVE-2008-2430: Videolan Vlc Media Player

High severity, CVSS 9.3. EPSS: 5.9% chance of exploitation in the next 30 days.

Integer overflow in the Open function in modules/demux/wav.c in VLC Media Player 0.8.6h on Windows allows remote attackers to execute arbitrary code via a large fmt chunk in a WAV file.

Affected products

• Videolan Vlc Media Player: version 0.8.6h only

Published 2008-07-07. Last modified 2026-06-16.