CVE-2011-4256: Realnetworks Realplayer

High severity, CVSS 10.0. EPSS: 4.3% chance of exploitation in the next 30 days.

The RV30 codec in RealNetworks RealPlayer before 15.0.0 and Mac RealPlayer before 12.0.0.1703 does not initialize an unspecified index value, which allows remote attackers to execute arbitrary code via unknown vectors.

Affected products

• Realnetworks Realplayer: up to and including 12.0.0.1701; version 7.0 only; version 8.0 only; version 10.0 only; version 10.0.0.305 only; version 10.0.0.331 only; …

Published 2011-11-24. Last modified 2026-06-16.