vlc_for_android vulnerabilities

CVEs whose affected-version data names the vlc_for_android package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-115724Low· 2.9

yesterday

VLC for Android before 3.7.2 File Overwrite via Spoofed Mail Attachment Provider

VLC for Android before 3.7.2 contains a confused-deputy file overwrite vulnerability in FileUtils.getUri() that trusts content URIs based only on the com.fsck.k9.attachmentprovider or gmail-ls authority. A co-installed app without permis…

▾ SunlitVideoLAN · VLC for Androidvia CVEORG