CVE-2010-3276: Videolan Vlc Media Player

High severity, CVSS 9.3. EPSS: 7.5% chance of exploitation in the next 30 days.

libdirectx_plugin.dll in VideoLAN VLC Media Player before 1.1.8 allows remote attackers to execute arbitrary code via a crafted width in an NSV file.

Affected products

• Videolan Vlc Media Player: up to and including 1.1.7; version 0.1.99b only; version 0.1.99e only; version 0.1.99f only; version 0.1.99g only; version 0.1.99h only; …

Published 2011-03-28. Last modified 2026-06-16.