CVE-2018-11516: Use After Free
The vlcdemuxchainedDelete function in input/demuxchained.c in VideoLAN VLC media player 3.0.1 allows remote attackers to cause a denial of service (heap corruption and application crash) or possibly have unspecified other impact via a crafted .swf file.
Affected Software
Event History
Frequently Asked Questions
What is CVE-2018-11516?
CVE-2018-11516 is a vulnerability in VideoLAN VLC media player 3.0.1 that allows remote attackers to cause a denial of service or possibly have other impact via a crafted .swf file.
How severe is CVE-2018-11516?
CVE-2018-11516 is rated as high severity with a CVSS v3.0 base score of 8.8.
How does CVE-2018-11516 affect Videolan Vlc Media Player?
Videolan Vlc Media Player versions 3.0.0 and 3.0.1 are affected by CVE-2018-11516.
How can CVE-2018-11516 be exploited?
CVE-2018-11516 can be exploited by remote attackers through a crafted .swf file.
Are there any references related to CVE-2018-11516?
Yes, here are some references related to CVE-2018-11516: [Link1], [Link2], [Link3].