Multiple VLC Media Player Vulnerabilities Allow Attackers to Corrupt or Read Heap Memory

Cybersecuritynews •Abinaya • September 12, 2026

Two security vulnerabilities in VLC Media Player could allow attackers to corrupt heap memory or disclose sensitive data from a victim’s memory. The flaws, tracked as CVE-2026-56711 and CVE-2026-73324, affect VLC Media Player versions 3.0.0 through 3.0.23 and require a victim to open a specially crafted media file or playlist entry. Fabian Wahle of Hap […]

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

VLC Media Player Vulnerabilities Allow Memory Corruption and Data Leakage Two vulnerabilities in VLC media player versions 3.0.0 to 3.0.23 have been identified, allowing attackers to exploit heap memory issues. The more critical flaw, CVE-2026-56711, involves a heap out-of-bounds write that can be triggered by processing a malicious PNG file or connecting to attacker-controlled RealRTSP servers. This vulnerability has a CVSS v4 score of [score not provided]. As of now, there is no patch available for these vulnerabilities, posing a significant risk to users. The vulnerabilities affect a wide range of users utilizing VLC media player, particularly those using versions within the specified range. The vulnerabilities were published on September 9, 2026, and are currently under scrutiny by security professionals. Users are advised to remain vigilant and avoid opening suspicious files or connecting to unknown servers until a patch is released. 3 sources 57

Extracted Entities

Multiple VLC Media Player Vulnerabilities Allow Attackers to Corrupt or Read Heap Memory

The full story

Extracted Entities

Attack Types (1)

CVEs (2)

CWE Weaknesses (1)