EIP-2026-116492

PRE-CVE

VideoLAN VLC Media Player 2.2.1 - m3u8/m3u Crash (PoC)

Title source: legacy
STIX 2.1

Exploitation Summary

EIP tracks 1 public exploit for EIP-2026-116492. PoCs published by Naser Farhadi.

AI-analyzed exploit summary This PoC exploits a stack overflow vulnerability in VLC media player 2.2.1 by crafting a malicious m3u8/m3u file. The buffer contains a crafted EXT-X-STREAM-INF tag followed by a filename, triggering a crash when parsed by VLC.

Description

VideoLAN VLC Media Player 2.2.1 - m3u8/m3u Crash (PoC)

Exploits (1)

exploitdb WORKING POC
by Naser Farhadi · pythondoswindows
https://www.exploit-db.com/exploits/37976

This PoC exploits a stack overflow vulnerability in VLC media player 2.2.1 by crafting a malicious m3u8/m3u file. The buffer contains a crafted EXT-X-STREAM-INF tag followed by a filename, triggering a crash when parsed by VLC.

Classification
Working Poc 95%
Attack Type
Dos
Complexity
Trivial
Reliability
Reliable
Target: VLC media player 2.2.1
No auth needed
Prerequisites: VLC media player 2.2.1 installed on Windows 7 SP1 (32-bit) · Ability to deliver the malicious m3u8/m3u file to the target
devstral-2 · analyzed Feb 18, 2026 Full analysis →

Details

Status pre_cve
Tracked Since Feb 18, 2026