CVE-2020-26664

A vulnerability in EbmlTypeDispatcher::send in VideoLAN VLC media player 3.0.11 allows attackers to trigger a heap-based buffer overflow via a crafted .mkv file...

CVE-2020-26664

A vulnerability in EbmlTypeDispatcher::send in VideoLAN VLC media player 3.0.11 allows attackers to trigger a heap-based buffer overflow via a crafted .mkv file...

Heap overflow

A vulnerability in EbmlTypeDispatcher::send in VideoLAN VLC media player 3.0.11 allows attackers to trigger a heap-based buffer overflow via a crafted .mkv file...

UBUNTU-CVE-2020-26664

A vulnerability in EbmlTypeDispatcher::send in VideoLAN VLC media player 3.0.11 allows attackers to trigger a heap-based buffer overflow via a crafted .mkv file...

CVE-2020-26664

A vulnerability in EbmlTypeDispatcher::send in VideoLAN VLC media player 3.0.11 allows attackers to trigger a heap-based buffer overflow via a crafted .mkv file...

CVE-2020-26664

A vulnerability in EbmlTypeDispatcher::send in VideoLAN VLC media player 3.0.11 allows attackers to trigger a heap-based buffer overflow via a crafted .mkv file...

CVE-2020-26664

CVE-2020-26664 affects VideoLAN VLC media player, due to a heap-based buffer overflow in EbmlTypeDispatcher::send triggered by crafted MKV files. Affected version in the initial doc is VLC 3.0.11; multiple connected advisories indicate fixes in later VLC releases (e.g., 3.0.12 and newer, with dis...

CVE-2020-26664

A vulnerability in EbmlTypeDispatcher::send in VideoLAN VLC media player 3.0.11 allows attackers to trigger a heap-based buffer overflow via a crafted .mkv file...

MGASA-2021-0005 Updated vlc packages features security improvements

The vlc package has been updated to version 3.0.12.1, which includes security enhancements in the web interface, as well as other fixes and enhancements. See the upstream NEWS file for details...

Updated vlc packages features security improvements

The vlc package has been updated to version 3.0.12.1, which includes security enhancements in the web interface, as well as other fixes and enhancements. See the upstream NEWS file for details...

PT-2021-3542

Name of the Vulnerable Software and Affected Versions VLC media player version 3.0.11 Description A heap-based buffer overflow issue exists in the EbmlTypeDispatcher::send function of VLC media player, which can be triggered by a crafted .mkv file. This allows attackers to potentially gain access...

Security update for minidlna (moderate)

openSUSE Security Update: Security update for minidlna Announcement ID: openSUSE-SU-2020:2226-1 Rating: moderate References: 1179447 Cross-References: CVE-2020-12695 CVE-2020-28926 Affected Products: openSUSE Backports SLE-15-SP1 An update that fixes two vulnerabilities is now available...

Security update for minidlna (moderate)

openSUSE Security Update: Security update for minidlna Announcement ID: openSUSE-SU-2020:2194-1 Rating: moderate References: 1179447 Cross-References: CVE-2020-12695 CVE-2020-28926 Affected Products: openSUSE Leap 15.1 An update that fixes two vulnerabilities is now available. Description: This...

Arbitrary Code Execution

vlc is vulnerable to arbitrary code execution. A divide-by-zero error exists in the SeekIndex function of demux/asf/asf.c, resulting in a floating point exception via and allows an attacker to execute arbitrary code via a malicious WMV file...

Heap Buffer Over-read

vlc:bionic is vulnerable to buffer overflows. lavcCopyPicture in modules/codec/avcodec/video.c in VideoLAN VLC media player has a heap-based buffer over-read because it does not properly validate the width and height...

Information Disclosure

vlc:bionic is vulnerable to information disclosure. The CAF demuxer in modules/demux/caf.c in VideoLAN VLC media player 3.0.4 may read memory from an uninitialized pointer when processing magic cookies in CAF files, because a ReadKukiChunk cast converts a return value to an unsigned int even if...

Denial Of Service (DoS)

vlc:bionic is vulnerable to denial of service DoS. A divide-by-zero error exists in the Control function of demux/caf.c in VideoLAN VLC media player. As a result, an FPE can be triggered via a crafted CAF file...

Denial Of Service (DoS)

vlc is vulnerable to denial of service DoS. The vulnerability exists through a NULL pointer dereference at the function SeekPercent of demux/asf/asf.c...

Arbitrary Code Execution

vlc is vulnerable to arbitrary code execution. A use-after-free in the mkv::virtualsegmentc::seek method of demux/mkv/virtualsegment.cpp allows an attacker to execute arbitrary code on the host OS...

Arbitrary Code Execution

vlc is vulnerable to arbitrary code execution. A use-after-free in the Control function in demux/mkv/mkv.cpp allows an attacker to execute arbitrary code on the host OS...