CVE-2019-13615: Out-of-bounds Read

libebml before 1.3.6, as used in the MKV module in VideoLAN VLC Media Player binaries before 3.0.3, has a heap-based buffer over-read in EbmlElement::FindNextElement...

CVE-2019-13602

An Integer Underflow in MP4EIA608Convert in modules/demux/mp4/mp4.c in VideoLAN VLC media player through 3.0.7.1 allows remote attackers to cause a denial of service heap-based buffer overflow and crash or possibly have unspecified other impact via a crafted .mp4 file...

CVE-2019-13602: Integer Underflow (Wrap or Wraparound)

An Integer Underflow in MP4EIA608Convert in modules/demux/mp4/mp4.c in VideoLAN VLC media player through 3.0.7.1 allows remote attackers to cause a denial of service heap-based buffer overflow and crash or possibly have unspecified other impact via a crafted .mp4 file...

CVE-2019-12874

An issue was discovered in zlibdecompressextra in modules/demux/mkv/util.cpp in VideoLAN VLC media player 3.x through 3.0.7. The Matroska demuxer, while parsing a malformed MKV file type, has a double free...

CVE-2019-12874

CVE-2019-12874 affects VLC media player 3.x up to 3.0.7. The Matroska demuxer’s MKV parser has a double free in zlib_decompress_extra, with related MKV processing flaws that can, per advisory texts, lead to a crash or possibly arbitrary code execution. Some sources also describe related DoS risk....

UBUNTU-CVE-2019-12874

An issue was discovered in zlibdecompressextra in modules/demux/mkv/util.cpp in VideoLAN VLC media player 3.x through 3.0.7. The Matroska demuxer, while parsing a malformed MKV file type, has a double free...

VLC zlib_decompress_extra Double Free Vulnerability

VLC media player is a free and open-source portable cross-platform media player software developed by the VideoLAN project. VLC is available for desktop operating systems and mobile platforms, such as Android, iOS, iPadOS, Wizen, Windows 10 Mobile, and Windows Phone. It is also available on digit...

CVE-2019-12874: Double Free

An issue was discovered in zlibdecompressextra in modules/demux/mkv/util.cpp in VideoLAN VLC media player 3.x through 3.0.7. The Matroska demuxer, while parsing a malformed MKV file type, has a double free...

VideoLAN VLC media player buffer overflow vulnerability (CNVD-2019-25509)

VideoLAN VLC media player is a free, open source cross-platform multimedia player also a multimedia framework organized by VideoLAN France. The product supports the playback of a variety of media files, CD-ROMs, etc., a variety of audio and video formats WMV, MP3, etc. and so on. A buffer overflo...

UBUNTU-CVE-2019-5439

A Buffer Overflow in VLC Media Player 3.0.7 causes a crash which can possibly be further developed into a remote code execution exploit...

PT-2019-3290

Name of the Vulnerable Software and Affected Versions VideoLAN VLC media player versions 3.x through 3.0.7 Description The issue is related to the Matroska demuxer in the VideoLAN VLC media player, which has a double free error when parsing a malformed MKV file type. This can be exploited by a...

VLC Player Gets Patched for Two High-Severity Bugs

Maintainers of the popular open-source VLC media player patched two high-severity bugs Friday. The flaws were an out-of-bound write vulnerability and a stack-buffer-overflow bug. Developers behind the software, VideoLAN, said the patches were two of 33 fixes being pushed out to the media player a...

PT-2019-4898

Name of the Vulnerable Software and Affected Versions VideoLAN VLC media player version 3.0.7.1 Description The issue is related to the xiph SplitHeaders function in the VideoLAN VLC media player, which is associated with the use of memory after it has been freed. This can be exploited by a remot...

PT-2019-4899

Name of the Vulnerable Software and Affected Versions VideoLAN VLC media player version 3.0.7.1 Description The issue is related to a heap-based buffer over-read in the xiph PackHeaders function, located in modules/demux/xiph.h. This can be triggered by remote attackers using a crafted .ogg file,...

PT-2019-4900

Name of the Vulnerable Software and Affected Versions VideoLAN VLC media player version 3.0.7.1 Description A divide-by-zero error exists in the Control function of demux/caf.c, which can be triggered via a crafted CAF file, potentially allowing a remote attacker to impact the confidentiality,...

PT-2019-4897

Name of the Vulnerable Software and Affected Versions VideoLAN VLC media player versions through 3.0.7 Description The issue is related to a heap-based buffer over-read in the lavc CopyPicture function, located in modules/codec/avcodec/video.c, due to improper validation of the width and height...

The vulnerability of the ReadRealIndex function in the Real demuxer plugin of the VideoLAN VLC media player allows a hacker to execute arbitrary code.

The vulnerability of the ReadRealIndex function in the Real demuxer plugin of the VideoLAN VLC media player is due to a numerical overflow that causes a buffer overflow. Exploiting this vulnerability allows an attacker to execute arbitrary code using a specially created malicious RealMedia .rm fi...

CVE-2018-19937

A local, authenticated attacker can bypass the passcode in the VideoLAN VLC media player app before 3.1.5 for iOS by opening a URL and turning the phone...

CVE-2018-19937

A local, authenticated attacker can bypass the passcode in the VideoLAN VLC media player app before 3.1.5 for iOS by opening a URL and turning the phone...

CVE-2018-19937

A local, authenticated attacker can bypass the passcode in the VideoLAN VLC media player app before 3.1.5 for iOS by opening a URL and turning the phone...