--- title: "VideoLAN vlc-3.0 vulnerabilities and CVEs" url: https://radicalnotion.ai/vendor/videolan/vlc-3-0 type: product description: "VideoLAN vlc-3.0 has 30 published CVEs, 0 in CISA KEV and 10 with public exploits." updated: 2021-07-26 source: RadicalNotion.AI license: CC BY-NC 4.0 (https://creativecommons.org/licenses/by-nc/4.0/) --- # VideoLAN vlc-3.0 vulnerabilities Vendor: [VideoLAN](https://radicalnotion.ai/vendor/videolan) - **Published CVEs:** 30 - **In CISA KEV:** 0 - **With a public exploit:** 10 - **With a patch:** 29 - **Average CVSS:** 7.5 - **First CVE:** 2016-04-18 - **Latest CVE:** 2021-07-26 ## Severity breakdown | Severity | CVEs | | --- | --- | | Critical | 4 | | High | 20 | | Medium | 6 | | Low | 0 | | Unscored | 0 | ## Most common weakness types | CWE | Name | CVEs | | --- | --- | --- | | [CWE-125](https://radicalnotion.ai/cwe/cwe-125) | Out-of-bounds Read | 8 | | [CWE-416](https://radicalnotion.ai/cwe/cwe-416) | Use After Free | 4 | | [CWE-787](https://radicalnotion.ai/cwe/cwe-787) | Out-of-bounds Write | 4 | | [CWE-415](https://radicalnotion.ai/cwe/cwe-415) | Double Free | 2 | | [CWE-191](https://radicalnotion.ai/cwe/cwe-191) | Integer Underflow (Wrap or Wraparound) | 2 | | [CWE-476](https://radicalnotion.ai/cwe/cwe-476) | NULL Pointer Dereference | 2 | | [CWE-369](https://radicalnotion.ai/cwe/cwe-369) | Divide By Zero | 2 | | [CWE-824](https://radicalnotion.ai/cwe/cwe-824) | Access of Uninitialized Pointer | 1 | ## CVEs by year | Year | CVEs published | | --- | --- | | 2016 | 1 | | 2017 | 2 | | 2018 | 2 | | 2019 | 18 | | 2020 | 2 | | 2021 | 5 | ## Affected versions (top 24 of 59) | Version | Kind | CVEs | | --- | --- | --- | | 3.0.7.1 | exact | 19 | | 0.9.0 | exact | 17 | | 0.9.0-test0 | exact | 17 | | 0.9.0-test1 | exact | 17 | | 0.9.0-test2 | exact | 17 | | 0.9.0-test3 | exact | 17 | | 1.0.0-pre1 | exact | 17 | | 1.0.0-pre2 | exact | 17 | | 1.0.0-rc1 | exact | 17 | | 1.1.0-ff | exact | 17 | | 1.1.0-pre1 | exact | 17 | | 1.2.0-pre1 | exact | 17 | | \<= 2.2.1 | range | 2 | | \<= 2.2.2 | range | 2 | | \<= 2.2.3 | range | 2 | | \<= 2.2.4 | range | 2 | | \<= 2.2.5 | range | 2 | | \<= 10.0 | range | 1 | | \<= 14.04 | range | 1 | | \<= 2.1.6 | range | 1 | | \<= 2.2.5.1 | range | 1 | | \<= 2.2.6 | range | 1 | | \<= 2.2.7 | range | 1 | | \<= 9.0 | range | 1 | ## CVEs | CVE | Title | Severity | CVSS | CISA KEV | Public exploit | Patch | | --- | --- | --- | --- | --- | --- | --- | | CVE-2021-25804 | - | high | 7.5 | No | No | Yes | | CVE-2021-25803 | - | high | 7.1 | No | No | Yes | | CVE-2021-25802 | - | high | 7.1 | No | No | Yes | | CVE-2021-25801 | - | high | 7.1 | No | No | Yes | | CVE-2020-26664 | - | high | 7.8 | No | Yes | Yes | | CVE-2020-13428 | - | high | 7.8 | No | No | Yes | | CVE-2019-19721 | - | high | 7.8 | No | Yes | Yes | | CVE-2019-18278 | - | high | 7.8 | No | Yes | No | | CVE-2019-14970 | - | high | 7.8 | No | No | Yes | | CVE-2019-14777 | - | high | 7.8 | No | No | Yes | | CVE-2019-14778 | - | high | 7.8 | No | No | Yes | | CVE-2019-14776 | - | high | 7.8 | No | No | Yes | | CVE-2019-14533 | - | high | 7.8 | No | No | Yes | | CVE-2019-14534 | - | medium | 5.5 | No | No | Yes | | CVE-2019-14535 | - | high | 7.8 | No | No | Yes | | CVE-2019-14498 | - | high | 7.8 | No | No | Yes | | CVE-2019-14438 | - | high | 7.8 | No | No | Yes | | CVE-2019-14437 | - | high | 7.8 | No | No | Yes | | CVE-2019-5460 | - | medium | 5.5 | No | Yes | Yes | | CVE-2019-5459 | - | high | 7.1 | No | Yes | Yes | | CVE-2019-13962 | - | critical | 9.8 | No | Yes | Yes | | CVE-2019-13615 | - | medium | 5.5 | No | Yes | Yes | | CVE-2019-13602 | - | high | 7.8 | No | No | Yes | | CVE-2019-12874 | - | critical | 9.8 | No | No | Yes | | CVE-2019-5439 | - | medium | 6.5 | No | No | Yes | | CVE-2018-19857 | - | critical | 9.1 | No | Yes | Yes | | CVE-2018-11516 | - | high | 8.8 | No | Yes | Yes | | CVE-2017-10699 | - | critical | 9.8 | No | No | Yes | | CVE-2017-8310 | - | medium | 5.5 | No | No | Yes | | CVE-2016-3941 | - | medium | 5.5 | No | Yes | Yes | ## Frequently asked questions ### How many CVEs does VideoLAN vlc-3.0 have? VideoLAN vlc-3.0 has 30 published CVE records since 2016. ### How many VideoLAN vlc-3.0 CVEs are in CISA KEV? None of VideoLAN vlc-3.0's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog. ### Are there public exploits for VideoLAN vlc-3.0 vulnerabilities? Yes — 10 of VideoLAN vlc-3.0's CVEs have a known public exploit. ### Which versions of VideoLAN vlc-3.0 are affected? 59 distinct VideoLAN vlc-3.0 versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version. ### What are the most common weakness types in VideoLAN vlc-3.0 CVEs? VideoLAN vlc-3.0's CVEs most often map to these CWE weakness types: CWE-125 (Out-of-bounds Read), CWE-416 (Use After Free), CWE-787 (Out-of-bounds Write), CWE-415 (Double Free). ### How many critical VideoLAN vlc-3.0 vulnerabilities are there? VideoLAN vlc-3.0 has 4 critical and 20 high-severity CVEs. ### What is the average severity of VideoLAN vlc-3.0 CVEs? The average CVSS base score across VideoLAN vlc-3.0's scored CVEs is 7.5. ## Other products from this vendor - [VLC media player](https://radicalnotion.ai/vendor/videolan/vlc-media-player) (117 CVEs) - [VLC](https://radicalnotion.ai/vendor/videolan/vlc) (23 CVEs) - [libbluray](https://radicalnotion.ai/vendor/videolan/libbluray) (3 CVEs) - [vlc-android](https://radicalnotion.ai/vendor/videolan/vlc-android) (3 CVEs) - [VLC for Android](https://radicalnotion.ai/vendor/videolan/vlc-for-android) (3 CVEs) - [dav1d](https://radicalnotion.ai/vendor/videolan/dav1d) (2 CVEs) - [libdvdnav](https://radicalnotion.ai/vendor/videolan/libdvdnav) (2 CVEs) - [vlc for mobile](https://radicalnotion.ai/vendor/videolan/vlc-for-mobile) (1 CVEs) --- Source: [RadicalNotion.AI](https://radicalnotion.ai/vendor/videolan/vlc-3-0). Licensed CC BY-NC 4.0; attribute RadicalNotion.AI and link the source page when you reuse this data.