Lucene search

K
freebsdFreeBSDF2144530-936F-11E9-8FC4-5404A68AD561
HistoryJan 23, 2019 - 12:00 a.m.

vlc -- Buffer overflow vulnerability

2019-01-2300:00:00
vuxml.freebsd.org
8

0.034 Low

EPSS

Percentile

91.5%

zhangyang reports:

The ReadFrame function in the avi.c file uses a variable i_width_bytes,
which is obtained directly from the file. It is a signed integer.
It does not do a strict check before the memory operation(memmove, memcpy),
which may cause a buffer overflow.

OSVersionArchitecturePackageVersionFilename
FreeBSDanynoarchvlc< 3.0.7,4UNKNOWN