[ASA-202101-35] vlc: arbitrary code execution

Arch Linux Security Advisory ASA-202101-35 ========================================== Severity: Medium Date : 2021-01-20 CVE-ID : CVE-2020-26664 Package : vlc Type : arbitrary code execution Remote : No Link : https://security.archlinux.org/AVG-1423 Summary ======= The package vlc before version...

CVE-2020-26664

A vulnerability in EbmlTypeDispatcher::send in VideoLAN VLC media player 3.0.11 allows attackers to trigger a heap-based buffer overflow via a crafted .mkv file...

CVE-2020-26664

A vulnerability in EbmlTypeDispatcher::send in VideoLAN VLC media player 3.0.11 allows attackers to trigger a heap-based buffer overflow via a crafted .mkv file...

UBUNTU-CVE-2020-26664

A vulnerability in EbmlTypeDispatcher::send in VideoLAN VLC media player 3.0.11 allows attackers to trigger a heap-based buffer overflow via a crafted .mkv file...

Heap overflow

A vulnerability in EbmlTypeDispatcher::send in VideoLAN VLC media player 3.0.11 allows attackers to trigger a heap-based buffer overflow via a crafted .mkv file...

CVE-2020-26664

A vulnerability in EbmlTypeDispatcher::send in VideoLAN VLC media player 3.0.11 allows attackers to trigger a heap-based buffer overflow via a crafted .mkv file...

CVE-2020-26664

A vulnerability in EbmlTypeDispatcher::send in VideoLAN VLC media player 3.0.11 allows attackers to trigger a heap-based buffer overflow via a crafted .mkv file...

CVE-2020-11193

u'Buffer over read can happen while parsing mkv clip due to improper typecasting of data returned from atomsize' in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in APQ8009, APQ8009W,...

Buffer overflow

u'Buffer over read can happen while parsing mkv clip due to improper typecasting of data returned from atomsize' in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in APQ8009, APQ8009W,...

CVE-2020-11193

u'Buffer over read can happen while parsing mkv clip due to improper typecasting of data returned from atomsize' in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in APQ8009, APQ8009W,...

CVE-2020-11193

CVE-2020-11193 describes a buffer over-read in Qualcomm/Snapdragon video processing caused by improper typecasting of data returned from atomsize while parsing MKV clips. Affected products cover Snapdragon Auto, Compute, Consumer IoT, Industrial IoT, Mobile, Wearables, and related SoCs (e.g., APQ...

Arbitrary Code Execution

vlc is vulnerable to arbitrary code execution. A use-after-free in the mkv::virtualsegmentc::seek method of demux/mkv/virtualsegment.cpp allows an attacker to execute arbitrary code on the host OS...

Heap Buffer Overflow

vlc:bionic is vulnerable to heap buffer overflow. Due to a flaw in mkv::eventthreadt in VideoLAN VLC media player allows remote attackers to trigger a heap-based buffer overflow via a crafted .mkv file...

Arbitrary Code Execution

vlc is vulnerable to arbitrary code execution. The vulnerability exists through a double free issue when parsing MKV files caused by zlibdecompressextra in modules/demux/mkv/util.cpp...

CVE-2020-11122

u'Null Pointer exception while playing crafted mkv file as data stream get deleted on secondary invalid configuration' in Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon Mobile in APQ8098, Bitra, Kamorta, SA6155P, Saipan, SM6150, SM7150, SM8150, SM8250, SXR2130...

Null pointer dereference

u'Null Pointer exception while playing crafted mkv file as data stream get deleted on secondary invalid configuration' in Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon Mobile in APQ8098, Bitra, Kamorta, SA6155P, Saipan, SM6150, SM7150, SM8150, SM8250, SXR2130...

CVE-2020-11122

CVE-2020-11122 corresponds to a Null Pointer dereference in Snapdragon video handling when decoding a crafted MKV data stream. Affected products include Snapdragon Auto, Snapdragon Consumer IoT, and Snapdragon Mobile (APQ8098, Bitra, Kamorta, SA6155P, Saipan, SM6150, SM7150, SM8150, SM8250, SXR21...

CVE-2020-11122

u'Null Pointer exception while playing crafted mkv file as data stream get deleted on secondary invalid configuration' in Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon Mobile in APQ8098, Bitra, Kamorta, SA6155P, Saipan, SM6150, SM7150, SM8150, SM8250, SXR2130...

Microsoft Windows hevcdecoder_store MKV File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Microsoft Windows. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of M...

VLC < 2.0.8 Multiple Vulnerabilities

The version of VLC media player installed on the remote Windows host is prior to 2.0.8. It is, therefore, affected by multiple vulnerabilities: - An exploitable denial of service vulnerability exists in plugins/demux/libmkvplugin.dll in VideoLAN VLC Media Player 2.0.7 and possibly other versions...