2
CVEs
0
Critical
1
High
0
KEV
0
PoC
1
Unpatched C/H
0.0%
Patch Rate
0.3%
Avg EPSS
Severity Breakdown
CRITICAL
0
HIGH
1
MEDIUM
1
LOW
0
Monthly CVE Trend
Affected Products (18)
Top Risky CVEs
| CVE | Summary | Severity | CVSS | EPSS | Priority | Signals |
|---|---|---|---|---|---|---|
| CVE-2026-56711 | Heap out-of-bounds write in VLC Media Player 3.0.0 through 3.0.23 allows a local attacker to corrupt memory by tricking a user into opening a crafted PNG file with attacker-controlled dimensions. The root cause is a 32-bit integer overflow in AllocatePicture() where plane pitch-times-lines multiplication wraps before widening to the size_t accumulator, causing both overflow guards to pass on the already-corrupted value; aligned_alloc then reserves a small wrapped buffer while the PNG decoder writes full-dimension scanlines past its end. No public exploit has been identified at time of analysis, and EPSS indicates 0.30% exploitation probability over the next 30 days. | HIGH | 7.3 | 0.3% | 37 |
No patch
|
| CVE-2026-73324 | Heap out-of-bounds read in VLC Media Player 3.0.0 through 3.0.23 allows a hostile RTSP server to extract adjacent heap memory from a connecting client. The flaw lies in the realrtsp access module: `RtspReadLine` in `modules/access/rtsp/access.c` uses `strncpy` with the full buffer length into a 4096-byte allocation, omitting the null terminator when the source is at least as long; `rtsp_get` in `modules/access/rtsp/rtsp.c` then passes that unterminated buffer to `strdup`, which walks heap memory until an incidental zero byte. The disclosed bytes are retained as the RTSP Session identifier and echoed back to the server on every subsequent request, giving the server operator a continuous read of arbitrary heap contents from the victim process. No public exploit code has been identified at time of analysis, and the module is disabled in some distribution packages. | MEDIUM | 5.3 | 0.3% | 27 |
No patch
|