CVE-2010-0364: Videolan Vlc Media Player

High severity, CVSS 9.3. EPSS: 6.6% chance of exploitation in the next 30 days.

Stack-based buffer overflow in VideoLAN VLC Media Player 0.8.6 allows user-assisted remote attackers to execute arbitrary code via an ogg file with a crafted Advanced SubStation Alpha Subtitle (.ass) file, probably involving the Dialogue field.

Affected products

• Videolan Vlc Media Player: version 0.8.6 only

Published 2010-01-21. Last modified 2026-06-16.