CVE-2025-51602: Medium severity Videolan VLC Media Player vulnerability
Published Jan 16, 2026
·Updated
mmstu.c in VideoLAN VLC media player before 3.0.22 allows an out-of-bounds read and denial of service via a crafted 0x01 response from an MMS server.
Affected Software
1 affected component
Videolan VLC Media Player<3.0.22
Event History
Jan 16, 2026
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
DescriptionSeverityWeakness
Data Sourced
via NVD·06:16 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the severity of CVE-2025-51602?
CVE-2025-51602 has been classified as a moderate severity vulnerability.
2
How do I fix CVE-2025-51602?
To fix CVE-2025-51602, upgrade VLC media player to version 3.0.22 or later.
3
What type of attack does CVE-2025-51602 allow?
CVE-2025-51602 allows for an out-of-bounds read which can lead to denial of service.
4
Which versions of VLC media player are affected by CVE-2025-51602?
VLC media player versions prior to 3.0.22 are affected by CVE-2025-51602.
5
Is CVE-2025-51602 exploitable remotely?
Yes, CVE-2025-51602 can be exploited via a crafted 0x01 response from an MMS server.