CVE-2019-13602

An Integer Underflow in MP4EIA608Convert in modules/demux/mp4/mp4.c in VideoLAN VLC media player through 3.0.7.1 allows remote attackers to cause a denial of service heap-based buffer overflow and crash or possibly have unspecified other impact via a crafted .mp4 file...

PT-2019-2909

Name of the Vulnerable Software and Affected Versions VLC media player versions prior to 3.0.7.1 Description The issue is related to an integer underflow in the MP4 EIA608 Convert function, located in modules/demux/mp4/mp4.c, which leads to a heap-based buffer overflow. This can be exploited by a...