CVE-2019-14437

2019-08-29T18:15:00
ID CVE-2019-14437
Type cve
Reporter cve@mitre.org
Modified 2020-08-24T17:37:00

Description

The xiph_SplitHeaders function in modules/demux/xiph.h in VideoLAN VLC media player 3.0.7.1 does not check array bounds properly. As a result, a heap-based buffer over-read can be triggered via a crafted .ogg file.