CVE-2018-11529

VideoLAN VLC media player 2.2.x is prone to a use after free vulnerability which an attacker can leverage to execute arbitrary code via crafted MKV files

published July 11, 2018

CVSS
—
EPSS
40%
Percentile
98.6
In the wild
Unconfirmed
What it is

VideoLAN VLC media player 2.2.x is prone to a use after free vulnerability which an attacker can leverage to execute arbitrary code via crafted MKV files. Failed exploit attempts will likely result in denial of service conditions.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.40497 · 98.6th percentile
Published
2018-07-11T16:00Z
EPSS history
Timeline
  • 11 JUL 16:00Z
    VideoLAN VLC media player 2.2.x is prone to a use after free vulnerability which an attacker can leverage to execute arbitrary code via crafted MKV files
    cvelistv5