CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

4 matches found

NVD•added 2019/08/29 6:15 p.m.•11 views

CVE-2019-14438

A heap-based buffer over-read in xiphPackHeaders in modules/demux/xiph.h in VideoLAN VLC media player 3.0.7.1 allows remote attackers to trigger a heap-based buffer over-read via a crafted .ogg file...

7.8CVSS8.5AI score0.0051EPSS

Exploits0References8

Debian CVE•added 2019/08/29 5:33 p.m.•22 views

CVE-2019-14438

7.8CVSS7.5AI score0.0051EPSS

Exploits0

CVE•added 2019/08/29 5:33 p.m.•187 views

CVE-2019-14438

CVE-2019-14438 affects VideoLAN VLC media player 3.0.7.1 and earlier, due to a heap-based buffer over-read in xiph_PackHeaders() within modules/demux/xiph.h, exploitable via crafted .ogg files. Multiple connected advisories confirm the issue and track fixes to VLC 3.0.8 (and related package updat...

7.8CVSS8.2AI score0.0051EPSS

Exploits0References8Affected Software1