VULNERABILITY INTELLIGENCE
CVE-2008-4686
CVSS score9.3 HIGH
EPSS probability9.94%
CISA KEVNot currently listed
Published2008-10-22
Last modified2026-06-16
CVSS vectorAV:N/AC:M/Au:N/C:C/I:C/A:C
Description
Multiple integer overflows in ty.c in the TY demux plugin (aka the TiVo demuxer) in VideoLAN VLC media player, probably 0.9.4, might allow remote attackers to execute arbitrary code via a crafted .ty file, a different vulnerability than CVE-2008-4654.