Arbitrary Code Execution

vlc is vulnerable to arbitrary code execution. A use-after-free in the mkv::virtualsegmentc::seek method of demux/mkv/virtualsegment.cpp allows an attacker to execute arbitrary code on the host OS...

CVE-2019-14778

CVE-2019-14778 affects VideoLAN VLC media player 3.0.7.1, where the mkv::virtual_segment_c::seek method in demux/mkv/virtual_segment.cpp has a use-after-free. Connected sources confirm this vulnerability in VLC’s MKV demuxer and note that remediation from multiple advisories is to upgrade VLC to ...