Approved changes feed: RSS · Atom

cpe:2.3:a:videolan:vlc_media_player:3.0.8:*:*:*:*:*:*:*

part: a version: 3.0.8 update: *

VendorVideolan (b1ef3618-afd2-52df-be05-50fdbdda8d58)
ProductVlc Media Player (7235d722-37bb-5c15-baca-3fcb0f701e33)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:deb/debian/vlc purl2cpe 2026-06-01 10:16:43.492453
pkg:deb/ubuntu/vlc purl2cpe 2026-06-01 10:16:43.492455
pkg:github/videolan/vlc purl2cpe 2026-06-01 10:16:43.492456
pkg:rpm/opensuse/vlc purl2cpe 2026-06-01 10:16:43.492458
pkg:videolan/vlc purl2cpe 2026-06-01 10:16:43.492459

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2019-18278 vulnerable 2026-06-08 05:13:11.345982 Details available
When executing VideoLAN VLC media player 3.0.8 with libqt on Windows, Data from a Faulting Address controls Code Flow starting at libqt_plugin!vlc_entry_license__3_0_0f+0x00000000003b9aba. NOTE: the VideoLAN security team indicates that they have not been contacted, and have no way of reproducing this issue.
Published: 2019-10-23T13:22:26.000Z
Updated: 2024-08-05T01:47:14.143Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.