UBUNTU-CVE-2019-12874

An issue was discovered in zlibdecompressextra in modules/demux/mkv/util.cpp in VideoLAN VLC media player 3.x through 3.0.7. The Matroska demuxer, while parsing a malformed MKV file type, has a double free...

VLC ReadRealIndex Code Execution

The vulnerability of the ReadRealIndex function in the Real demuxer plugin of the VideoLAN VLC media player is due to a numerical overflow that causes a buffer overflow. Exploiting this vulnerability allows an attacker to execute arbitrary code using a specially created malicious RealMedia .rm fi...