UBUNTU-CVE-2019-14438

A heap-based buffer over-read in xiphPackHeaders in modules/demux/xiph.h in VideoLAN VLC media player 3.0.7.1 allows remote attackers to trigger a heap-based buffer over-read via a crafted .ogg file...

UBUNTU-CVE-2019-14437

The xiphSplitHeaders function in modules/demux/xiph.h in VideoLAN VLC media player 3.0.7.1 does not check array bounds properly. As a result, a heap-based buffer over-read can be triggered via a crafted .ogg file...

VideoLAN VLC media player buffer overflow vulnerability (CNVD-2019-31069)

VideoLAN VLC media player is a free, open source cross-platform multimedia player also a multimedia framework organized by VideoLAN France. The product supports the playback of a variety of media files, CD-ROMs, etc., a variety of audio and video formats WMV, MP3, etc. and so on. A buffer error...

VideoLAN VLC media player resource management error vulnerability (CNVD-2019-31070)

VideoLAN VLC media player is a free, open source cross-platform multimedia player also a multimedia framework organized by VideoLAN France. The product supports the playback of a variety of media files, CD-ROMs, etc., a variety of audio and video formats WMV, MP3, etc. and so on. A resource...

PT-2019-4898

Name of the Vulnerable Software and Affected Versions VideoLAN VLC media player version 3.0.7.1 Description The issue is related to the xiph SplitHeaders function in the VideoLAN VLC media player, which is associated with the use of memory after it has been freed. This can be exploited by a remot...

PT-2019-4899

Name of the Vulnerable Software and Affected Versions VideoLAN VLC media player version 3.0.7.1 Description The issue is related to a heap-based buffer over-read in the xiph PackHeaders function, located in modules/demux/xiph.h. This can be triggered by remote attackers using a crafted .ogg file,...

Out-of-bounds Read

Overview Affected versions of this package are vulnerable to Out-of-bounds Read barknoisehybridmp in psy.c in Xiph.Org libvorbis 1.3.6 has a stack-based buffer over-read. Remediation There is no fixed version for vorbis. References - Gitlab.xiph.org...

Xiph.Org libao '_tokenize_matrix' function denial of service vulnerability

Xiph.Org libao is a cross-platform audio library capable of outputting audio on a variety of different platforms. A security vulnerability exists in the 'tokenizematrix' function of the audioout.c file in Xiph.Org libao version 1.2.0. A remote attacker can exploit this vulnerability to cause a...

CVE-2017-11548

The tokenizematrix function in audioout.c in Xiph.Org libao 1.2.0 allows remote attackers to cause a denial of service memory corruption via a crafted MP3 file...

CVE-2015-6749

Buffer overflow in the aiffopen function in oggenc/audio.c in vorbis-tools 1.4.0 and earlier allows remote attackers to cause a denial of service crash via a crafted AIFF file...

PT-2015-3381

Name of the Vulnerable Software and Affected Versions VLC media player versions prior to 2.1.6 Description The issue is related to a buffer overflow in the RTP streaming code, specifically in the rtp packetize xiph config function, due to improper bounds checking. This allows remote attackers to...

Multiple libvorbis flaws (CVE-2007-4066, CVE-2007-4029)

Multiple buffer overflows in Xiph.Org libvorbis before 1.2.0 allow context-dependent attackers to cause a denial of service or have other unspecified impact via a crafted OGG file, aka trac Changesets 13162, 13168, 13169, 13170, 13172, 13211, and 13215, as demonstrated by an overflow in oggenc.ex...