CVE-2012-1776: Videolan Vlc Media Player

High severity, CVSS 9.3. EPSS: 5.3% chance of exploitation in the next 30 days.

Multiple heap-based buffer overflows in VideoLAN VLC media player before 2.0.1 allow remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted Real RTSP stream.

Affected products

• Videolan Vlc Media Player: up to and including 2.0.0; version 0.1.99a only; version 0.1.99b only; version 0.1.99c only; version 0.1.99d only; version 0.1.99e only; …

Published 2012-03-19. Last modified 2026-06-16.