A Buffer Overflow in VLC Media Player < 3.0.7 causes a crash which can possibly be further developed into a remote code execution exploit.
[
{
"product": "VLC Media Player",
"vendor": "n/a",
"versions": [
{
"status": "affected",
"version": "Fixed in 3.0.7"
}
]
}
]
lists.opensuse.org/opensuse-security-announce/2019-08/msg00005.html
lists.opensuse.org/opensuse-security-announce/2019-08/msg00037.html
lists.opensuse.org/opensuse-security-announce/2019-08/msg00040.html
lists.opensuse.org/opensuse-security-announce/2019-08/msg00081.html
www.securityfocus.com/bid/108769
hackerone.com/reports/484398
security.gentoo.org/glsa/201908-23
usn.ubuntu.com/4074-1/