{"vulnerability": "cve-2026-73324", "sightings": [{"uuid": "4dfe7dda-5e15-4162-ac92-646caf7eaa52", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-73324", "type": "seen", "source": "https://bsky.app/profile/securityonline.bsky.social/post/3mva6x6vu5v2q", "content": "Two VLC media player vulnerabilities (CVE-2026-56711, CVE-2026-73324) allow heap out-of-bounds write and read. No patch is available yet.\n\n#VLC #VideoLAN #VLCvulnerability #CVE #HeapOverflow #MediaPlayer #InfoSec #IntegerOverflow #RTSP #PatchNow", "creation_timestamp": "2026-09-11T08:54:11.349337Z"}, {"uuid": "f5ec4e7e-9fe1-4e81-b0e3-04b7f4f91989", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-73324", "type": "seen", "source": "https://infosec.exchange/users/DarkWebInformer/statuses/117253383601050445", "content": "\ud83d\udea8 Two VLC Media Player flaws can allow code execution and leak sensitive memory\nSecurity researchers have disclosed two vulnerabilities affecting VLC Media Player versions 3.0.0 through 3.0.23.\u2800CVE-2026-56711, rated 8.6, is a heap out-of-bounds write caused by an integer overflow in VLC's picture buffer allocation.\nAn attacker can craft a malicious PNG with manipulated dimensions that causes VLC to allocate an undersized memory buffer before writing beyond its boundaries.\nThe flaw can potentially lead to arbitrary code execution when the malicious image is opened directly or loaded through a playlist.\u2800CVE-2026-73324, rated 6.9, affects VLC's RealRTSP handling.\nA malicious RTSP server can send an oversized response that causes VLC to read beyond an allocated buffer and return adjacent heap memory to the attacker, potentially exposing sensitive information.\u2800The vulnerable RealRTSP component is enabled in official VideoLAN builds, although some Linux distribution packages may compile VLC without it.\u2800As of September 11, VLC 3.0.23 remains the current stable desktop release listed by VideoLAN and is affected by both vulnerabilities.\nUsers should avoid opening untrusted image files or RealRTSP playlist links until an updated release addressing the flaws becomes available.\nSource: https://securityonline.info/vlc-media-player-vulnerabilities/", "creation_timestamp": "2026-09-11T16:37:28.044797Z"}, {"uuid": "b65467eb-3105-46b3-8c1a-c4e4a413c345", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-73324", "type": "seen", "source": "https://bsky.app/profile/volk149.bsky.social/post/3mvazhf4ctc2n", "content": "VLC\u30e1\u30c7\u30a3\u30a2\u30d7\u30ec\u30a4\u30e4\u30fc\u306b\nCVE-2026-56711(8.6)\u3001CVE-2026-73324(6.9)\u306e\n\u8106\u5f31\u6027\u544a\u77e5\u3067\u3066\u308b\u306e\u304b\u3002\n\u305d\u3057\u3066\u3053\u308c\u3089\u3078\u306e\u5bfe\u5fdc\u306f\u307e\u3060\u30a2\u30c3\u30d7\u30c7\u30fc\u30c8\u51fa\u3066\u306a\u3044\u3068\n\nhttps://nvd.nist.gov/vuln/detail/cve-2026-56711\nhttps://nvd.nist.gov/vuln/detail/cve-2026-73324", "creation_timestamp": "2026-09-11T16:48:32.168161Z"}]}