High severity7.1NVD Advisory· Published Jul 26, 2021· Updated Jun 17, 2026
CVE-2021-25802
CVE-2021-25802
Description
A buffer overflow vulnerability in the AVI_ExtractSubtitle component of VideoLAN VLC Media Player 3.0.11 allows attackers to cause an out-of-bounds read via a crafted .avi file.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
3cpe:2.3:a:videolan:vlc_media_player:3.0.11:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:videolan:vlc_media_player:3.0.11:*:*:*:*:*:*:*
- (no CPE)range: =3.0.11
- VideoLAN/VLC Media Playerdescription
Patches
Vulnerability mechanics
References
1- code.videolan.org/videolan/vlc-3.0/-/commit/0660acc3ab64d2c3ad99cae887a438f0648faa72nvdPatchVendor Advisory
News mentions
0No linked articles in our index yet.