CVE-2008-5032: Videolan Vlc Media Player

High severity, CVSS 9.3. EPSS: 10.7% chance of exploitation in the next 30 days.

Stack-based buffer overflow in VideoLAN VLC media player 0.5.0 through 0.9.5 might allow user-assisted attackers to execute arbitrary code via the header of an invalid CUE image file, related to modules/access/vcd/cdrom.c. NOTE: this identifier originally included an issue related to RealText, but that issue has been assigned a separate identifier, CVE-2008-5036.

Affected products

• Videolan Vlc Media Player: version 0.5.0 only; version 0.5.3 only; version 0.6.0 only; version 0.6.2 only; version 0.7.0 only; version 0.7.1 only; …

Published 2008-11-10. Last modified 2026-06-16.