VYPR
← All advisories
Unrated severityNVD Advisory· Published Oct 22, 2008· Updated Jun 16, 2026

CVE-2008-4686

CVE-2008-4686

Description

Multiple integer overflows in ty.c in the TY demux plugin (aka the TiVo demuxer) in VideoLAN VLC media player, probably 0.9.4, might allow remote attackers to execute arbitrary code via a crafted .ty file, a different vulnerability than CVE-2008-4654.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

7
  • VideoLAN/VLC media player6 versions
    cpe:2.3:a:videolan:vlc_media_player:0.9.0:*:*:*:*:*:*:*+ 5 more
    • cpe:2.3:a:videolan:vlc_media_player:0.9.0:*:*:*:*:*:*:*
    • cpe:2.3:a:videolan:vlc_media_player:0.9.1:*:*:*:*:*:*:*
    • cpe:2.3:a:videolan:vlc_media_player:0.9.2:*:*:*:*:*:*:*
    • cpe:2.3:a:videolan:vlc_media_player:0.9.3:*:*:*:*:*:*:*
    • cpe:2.3:a:videolan:vlc_media_player:0.9.4:*:*:*:*:*:*:*
    • (no CPE)range: 0.9.4
  • VideoLAN/TY demux pluginllm-create
    Range: 0.9.4

Patches

Vulnerability mechanics

References

5

News mentions

0

No linked articles in our index yet.