CVE-2011-2194: Videolan Vlc Media Player

High severity, CVSS 9.3. EPSS: 9.2% chance of exploitation in the next 30 days.

Integer overflow in the XSPF playlist parser in VideoLAN VLC media player 0.8.5 through 1.1.9 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via unspecified vectors that trigger a heap-based buffer overflow.

Affected products

• Videolan Vlc Media Player: version 0.8.5 only; version 0.8.6 only; version 0.8.6a only; version 0.8.6b only; version 0.8.6c only; version 0.8.6d only; …

Published 2011-06-24. Last modified 2026-06-16.