VLC Media Player Flaws Let Attackers Corrupt Memory and Leak Sensitive Data

Gbhackers •Divya • September 11, 2026

Two security vulnerabilities in VLC media player versions 3.0.0 through 3.0.23 could allow attackers to exploit heap memory issues. These vulnerabilities can be triggered by processing a malicious PNG file or connecting to attacker-controlled RealRTSP servers. The more severe vulnerability, tracked as CVE-2026-56711, is a heap out-of-bounds write flaw with a CVSS v4 score of […]

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

VLC Media Player Vulnerabilities Allow Memory Corruption and Data Leakage Two vulnerabilities in VLC media player versions 3.0.0 to 3.0.23 have been identified, allowing attackers to exploit heap memory issues. The more critical flaw, CVE-2026-56711, involves a heap out-of-bounds write that can be triggered by processing a malicious PNG file or connecting to attacker-controlled RealRTSP servers. This vulnerability has a CVSS v4 score of [score not provided]. As of now, there is no patch available for these vulnerabilities, posing a significant risk to users. The vulnerabilities affect a wide range of users utilizing VLC media player, particularly those using versions within the specified range. The vulnerabilities were published on September 9, 2026, and are currently under scrutiny by security professionals. Users are advised to remain vigilant and avoid opening suspicious files or connecting to unknown servers until a patch is released. 2 sources 57

Extracted Entities

VLC Media Player Flaws Let Attackers Corrupt Memory and Leak Sensitive Data

The full story

Extracted Entities

Attack Types (1)

CVEs (1)

CWE Weaknesses (1)