CVE-2014-6440: Videolan Vlc

Critical severity, CVSS 9.8. EPSS: 5% chance of exploitation in the next 30 days.

VideoLAN VLC media player before 2.1.5 allows remote attackers to execute arbitrary code or cause a denial of service.

Affected products

• Videolan Vlc: up to and including 2.1.4

Published 2017-03-28. Last modified 2026-06-17.