CVE-2026-102875Published
VLC media player before 3.0.24 Path Traversal via skins2
Explicit identifiers and source references
These records connect through source-stated identifiers. Shared identifiers or dates alone do not establish shared exposure, root cause or applicability.
CVE-2026-102875 · Microsoft / collected KEV context
cve-program · CVE-2026-102875
- https://code.videolan.org/videolan/vlc/-/commit/59934edbd03c6c1147d75d6c91e96633b710ec31
- https://code.videolan.org/videolan/vlc/-/commit/8d43e99c2c01d9aab3ecad00e7a102806262b06b
- https://code.videolan.org/videolan/vlc/-/blob/3.0.23/modules/gui/skins2/src/theme_loader.cpp
- https://code.videolan.org/videolan/vlc
- https://www.vulncheck.com/advisories/vlc-media-player-before-3.0.24-path-traversal-via-skins2
Related operational evidence
Explicit CVE identifiersNo related operational record is retained in the current change model.