783 matches found
CVE-2023-47360
Videolan VLC prior to version 3.0.20 contains an Integer underflow that leads to an incorrect packet length...
Integer overflow
Videolan VLC prior to version 3.0.20 contains an Integer underflow that leads to an incorrect packet length...
CVE-2023-47360
CVE-2023-47360 affects VLC media player prior to 3.0.20. The vulnerability is an Integer underflow that leads to an incorrect packet length. Multiple advisories (Ubuntu USN-6783-1, Nessus plugins for VLC
CVE-2023-47359
CVE-2023-47359 affects VLC media player prior to 3.0.20. An incorrect offset read in GetPacket can cause a heap-based buffer overflow and memory corruption. Public advisories (including OpenVAS/Nessus listings and Ubuntu USN) flag potential crash and, in some sources, remote code execution possib...
CVE-2023-47360
Videolan VLC prior to version 3.0.20 contains an Integer underflow that leads to an incorrect packet length...
CVE-2023-47359
Videolan VLC prior to version 3.0.20 contains an incorrect offset read that leads to a Heap-Based Buffer Overflow in function GetPacket and results in a memory corruption...
CVE-2023-47360
Videolan VLC prior to version 3.0.20 contains an Integer underflow that leads to an incorrect packet length...
VideoLAN VLC media player security vulnerability
VideoLAN VLC media player is a free, open source cross-platform multimedia player also a multimedia framework organized by VideoLAN France. It supports the playback of a wide range of media files, CD-ROMs, etc., audio and video formats WMV, MP3, etc., and more. A security vulnerability exists in...
VideoLAN VLC media player security vulnerability
VideoLAN VLC media player is a free, open source cross-platform multimedia player also a multimedia framework organized by VideoLAN France. It supports the playback of a wide range of media files, CD-ROMs, etc., audio and video formats WMV, MP3, etc., and more. A security vulnerability exists in...
CVE-2023-47359
Videolan VLC prior to version 3.0.20 contains an incorrect offset read that leads to a Heap-Based Buffer Overflow in function GetPacket and results in a memory corruption...
CVE-2023-47359
Videolan VLC prior to version 3.0.20 contains an incorrect offset read that leads to a Heap-Based Buffer Overflow in function GetPacket and results in a memory corruption...
CVE-2023-47360
Videolan VLC prior to version 3.0.20 contains an Integer underflow that leads to an incorrect packet length...
PT-2023-7038 · Videolan +5 · Vlc +5
Name of the Vulnerable Software and Affected Versions: Videolan VLC versions prior to 3.0.20 Description: The issue is related to an integer underflow in the GetPacket function of the VLC media player, which can lead to an incorrect packet length. This can potentially allow a remote attacker to...
PT-2023-7034 · Videolan +5 · Vlc +5
Name of the Vulnerable Software and Affected Versions: Videolan VLC versions prior to 3.0.20 Description: The issue is related to a Heap-Based Buffer Overflow in the GetPacket function, which can lead to memory corruption. This can be exploited by a remote attacker to damage memory. The estimated...
Ubuntu 16.04 ESM : VideoLAN x265 vulnerability (USN-4809-1)
The remote Ubuntu 16.04 ESM host has packages installed that are affected by a vulnerability as referenced in the USN-4809-1 advisory. It was discovered that VideoLAN x265 mishandled certain memory-allocation inputs. An attacker could use this vulnerability to cause a denial of service crash...
GLSA-202310-05 : dav1d: Denial of Service
The remote host is affected by the vulnerability described in GLSA-202310-05 dav1d: Denial of Service - VideoLAN dav1d before 1.2.0 has a threadtask.c race condition that can lead to an application crash, related to dav1ddecodeframeexit. CVE-2023-32570 Note that Nessus has not tested for this iss...
Fedora 38 : dav1d (2023-9ea5d6e289)
The remote Fedora 38 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2023-9ea5d6e289 advisory. Update to version 1.2.1. This version includes a fix for CVE-2023-32570 race condition that can lead to an application crash. Tenable has extracted...
SUSE SLED15 / SLES15 / openSUSE 15 Security Update : dav1d (SUSE-SU-2023:2618-1)
The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2023:2618-1 advisory. - CVE-2023-32570: Fixed possible crash when decoding a frame bsc1211262. Tenable has extracted the...
