VLC VP9 Resolution Change Crash - Abnormal Process Termination or Child Spawn

Ethan Andrews@eandrews

•updated Jun 28, 2026•0•0•3

Detects VLC media player crash conditions or suspicious child process creation immediately following the processing of VP9-encoded video files (.webm, .mkv). This behavior is indicative of potential memory corruption exploitation, such as the vlc-vp9-reschange-crash-poc, which aims to leverage malformed resolution change events for application instability or code execution.