HIGH

CVE-2018-11529

CVSS v3

8

HIGH

EPSS Score

73.8%

exploit probability

CISA KEV

No

known exploited

Exploitation

SSVC status

Description

VideoLAN VLC media player 2.2.x is prone to a use after free vulnerability which an attacker can leverage to execute arbitrary code via crafted MKV files. Failed exploit attempts will likely result in denial of service conditions.

Technical details

Published
7/11/2018
Exploit-DB
EDB-45626

Frequently asked questions

What is CVE-2018-11529?

VideoLAN VLC media player 2.2.x is prone to a use after free vulnerability which an attacker can leverage to execute arbitrary code via crafted MKV files. Failed exploit attempts will likely result in denial of service conditions.

Is CVE-2018-11529 actively exploited?

Active exploitation of CVE-2018-11529 has not been confirmed. The EPSS score is 73.8%, indicating the estimated probability of exploitation in the next 30 days.

What is the CVSS score for CVE-2018-11529?

CVE-2018-11529 has a CVSS v3 base score of 8 (HIGH severity).

Is CVE-2018-11529 affecting your environment?

Use isMalicious to check if any of your IPs or domains are associated with this vulnerability's IOCs.