CVE-2019-14970
A vulnerability in mkv::event_thread_t in VideoLAN VLC media player 3.0.7.1 allows remote attackers to trigger a heap-based buffer overflow via a crafted .mkv file.
- Update to 3.0.8-0ubuntu18.04.1
Published Updated
PatchFirst · Latest vulnerabilities
vlc vulnerabilities
Vulnerabilities published for vlc in the last 30 days: 0. Listed in the KEV catalogue: 0.
Vulnerabilities: 15
CVE-2019-14777
The Control function of demux/mkv/mkv.cpp in VideoLAN VLC media player 3.0.7.1 has a use-after-free.
- Update to 3.0.8-0ubuntu18.04.1
Published UpdatedCVE-2019-14778
The mkv::virtual_segment_c::seek method of demux/mkv/virtual_segment.cpp in VideoLAN VLC media player 3.0.7.1 has a use-after-free.
- Update to 3.0.8-0ubuntu18.04.1
Published UpdatedCVE-2019-14776
A heap-based buffer over-read exists in DemuxInit() in demux/asf/asf.c in VideoLAN VLC media player 3.0.7.1 via a crafted .mkv file.
- Update to 3.0.8-0ubuntu18.04.1
Published UpdatedCVE-2019-14533
The Control function of demux/asf/asf.c in VideoLAN VLC media player 3.0.7.1 has a use-after-free.
- Update to 3.0.8-0ubuntu18.04.1
Published UpdatedCVE-2019-14534
In VideoLAN VLC media player 3.0.7.1, there is a NULL pointer dereference at the function SeekPercent of demux/asf/asf.c that will lead to a denial of service attack.
- Update to 3.0.8-0ubuntu18.04.1
Published UpdatedCVE-2019-14535
A divide-by-zero error exists in the SeekIndex function of demux/asf/asf.c in VideoLAN VLC media player 3.0.7.1. As a result, an FPE can be triggered via a crafted WMV file.
- Update to 3.0.8-0ubuntu18.04.1
Published UpdatedCVE-2019-14498
A divide-by-zero error exists in the Control function of demux/caf.c in VideoLAN VLC media player 3.0.7.1. As a result, an FPE can be triggered via a crafted CAF file.
- Update to 3.0.8-0ubuntu18.04.1
Published UpdatedCVE-2019-14438
A heap-based buffer over-read in xiph_PackHeaders() in modules/demux/xiph.h in VideoLAN VLC media player 3.0.7.1 allows remote attackers to trigger a heap-based buffer over-read via a crafted .ogg file.
- Update to 3.0.8-0ubuntu18.04.1
Published UpdatedCVE-2019-14437
The xiph_SplitHeaders function in modules/demux/xiph.h in VideoLAN VLC media player 3.0.7.1 does not check array bounds properly. As a result, a heap-based buffer over-read can be triggered via a crafted .ogg file.
- Update to 3.0.8-0ubuntu18.04.1
Published UpdatedCVE-2019-13962
lavc_CopyPicture in modules/codec/avcodec/video.c in VideoLAN VLC media player through 3.0.7 has a heap-based buffer over-read because it does not properly validate the width and height.
- Update to 3.0.8-0ubuntu18.04.1
Published UpdatedCVE-2019-13602
An Integer Underflow in MP4_EIA608_Convert() in modules/demux/mp4/mp4.c in VideoLAN VLC media player through 3.0.7.1 allows remote attackers to cause a denial of service (heap-based buffer overflow and crash) or possibly have unspecified other impact via a crafted .mp4 file.
- Update to 3.0.7.1-0ubuntu18.04.1
Published UpdatedCVE-2019-12874
An issue was discovered in zlib_decompress_extra in modules/demux/mkv/util.cpp in VideoLAN VLC media player 3.x through 3.0.7. The Matroska demuxer, while parsing a malformed MKV file type, has a double free.
- Update to 3.0.7.1-0ubuntu18.04.1
Published UpdatedCVE-2019-5439
A Buffer Overflow in VLC Media Player < 3.0.7 causes a crash which can possibly be further developed into a remote code execution exploit.
- Update to 3.0.7.1-0ubuntu18.04.1
Published UpdatedCVE-2018-19857
The CAF demuxer in modules/demux/caf.c in VideoLAN VLC media player 3.0.4 may read memory from an uninitialized pointer when processing magic cookies in CAF files, because a ReadKukiChunk() cast converts a return value to an unsigned int even if that value is negative. This could result in a denial of service and/or a potential infoleak.
- Update to 3.0.7.1-0ubuntu18.04.1
Published Updated
Check your server
Check your installed stack and versions against the current vulnerability feeds.