What is the CVSS score of CVE-2025-51602?

CVE-2025-51602 has a CVSS 3.1 base score of 4.8 (Medium). CVSS vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:L. EPSS exploitation probability: 0.0%.

Which versions of Suse are affected by CVE-2025-51602?

Organizations using VideoLAN VLC media player should be aware of moderate risk from CVE-2025-51602, a out-of-bounds read vulnerability rated CVSS 4.8.

How to fix or mitigate CVE-2025-51602?

Within 30 days: Identify affected systems running VideoLAN VLC media player and apply vendor patches as part of regular patch cycle. Monitor vendor channels for patch availability.

Suse CVE-2025-51602

MEDIUM

Out-of-bounds Read (CWE-125)

2026-01-16 cve@mitre.org

Buffer Overflow Denial Of Service Information Disclosure Suse

4.8

CVSS 3.1 · NVD

Severity by source

NVD PRIMARY

4.8 MEDIUM

AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:L

SUSE

MEDIUM

qualitative

Primary rating from NVD.

CVSS VectorNVD

Attack Vector

Network

Attack Complexity

High

Privileges Required

None

User Interaction

None

Scope

Unchanged

Confidentiality

None

Integrity

Low

Availability

Low

Lifecycle Timeline

Analysis Generated

Mar 12, 2026 - 21:54 vuln.today

CVE Published

Jan 16, 2026 - 18:16 nvd

MEDIUM 4.8

DescriptionCVE.org

mmstu.c in VideoLAN VLC media player before 3.0.22 allows an out-of-bounds read and denial of service via a crafted 0x01 response from an MMS server.

AnalysisAI

mmstu.c in VideoLAN VLC media player versions up to 3.0.22 is affected by out-of-bounds read (CVSS 4.8).

Technical ContextAI

This vulnerability (CWE-125: Out-of-bounds Read) affects mmstu.c in VideoLAN VLC media player. mmstu.c in VideoLAN VLC media player before 3.0.22 allows an out-of-bounds read and denial of service via a crafted 0x01 response from an MMS server.