CVE-2011-0531: Videolan Vlc Media Player

High severity, CVSS 9.3. EPSS: 41.9% chance of exploitation in the next 30 days.

demux/mkv/mkv.hpp in the MKV demuxer plugin in VideoLAN VLC media player 1.1.6.1 and earlier allows remote attackers to cause a denial of service (crash) and execute arbitrary commands via a crafted MKV (WebM or Matroska) file that triggers memory corruption, related to "class mismatching" and the MKV_IS_ID macro.

Affected products

• Videolan Vlc Media Player: up to and including 1.1.6.1; version 0.1.99b only; version 0.1.99e only; version 0.1.99f only; version 0.1.99g only; version 0.1.99h only; …

Published 2011-02-07. Last modified 2026-06-16.