CVE-2019-13962

lavcCopyPicture in modules/codec/avcodec/video.c in VideoLAN VLC media player through 3.0.7 has a heap-based buffer over-read because it does not properly validate the width and height...

PT-2019-4897

Name of the Vulnerable Software and Affected Versions VideoLAN VLC media player versions through 3.0.7 Description The issue is related to a heap-based buffer over-read in the lavc CopyPicture function, located in modules/codec/avcodec/video.c, due to improper validation of the width and height...