CVE-2008-3732: Videolan Vlc Media Player

High severity, CVSS 9.3. EPSS: 13.4% chance of exploitation in the next 30 days.

Integer overflow in the Open function in modules/demux/tta.c in VLC Media Player 0.8.6i allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted TTA file, which triggers a heap-based buffer overflow. NOTE: some of these details are obtained from third party information.

Affected products

• Videolan Vlc Media Player: version 0.8.6i only

Published 2008-08-20. Last modified 2026-06-16.