|
2019-07-14
|
CVE-2019-13602
|
An Integer Underflow in MP4_EIA608_Convert() in modules/demux/mp4/mp4.c in VideoLAN VLC media player through 3.0.7.1 allows remote attackers to cause a denial of service (heap-based buffer overflow and crash) or possibly have unspecified other impact via a crafted .mp4 file.
|
Vlc_media_player
|
8.8
|
|
|
|
2019-07-18
|
CVE-2019-13962
|
lavc_CopyPicture in modules/codec/avcodec/video.c in VideoLAN VLC media player through 3.0.7 has a heap-based buffer over-read because it does not properly validate the width and height.
|
Vlc_media_player
|
9.8
|
|
|
|
2020-05-15
|
CVE-2019-19721
|
An off-by-one error in the DecodeBlock function in codec/sdl_image.c in VideoLAN VLC media player before 3.0.9 allows remote attackers to cause a denial of service (memory corruption) via a crafted image file. NOTE: this may be related to the SDL_Image product.
|
Vlc_media_player
|
7.8
|
|
|
|
2021-01-08
|
CVE-2020-26664
|
A vulnerability in EbmlTypeDispatcher::send in VideoLAN VLC media player 3.0.11 allows attackers to trigger a heap-based buffer overflow via a crafted .mkv file.
|
Debian_linux, Vlc_media_player
|
7.8
|
|
|
|
2018-05-28
|
CVE-2018-11516
|
The vlc_demux_chained_Delete function in input/demux_chained.c in VideoLAN VLC media player 3.0.1 allows remote attackers to cause a denial of service (heap corruption and application crash) or possibly have unspecified other impact via a crafted .swf file.
|
Vlc_media_player
|
8.8
|
|
|
|
2019-08-29
|
CVE-2019-14970
|
A vulnerability in mkv::event_thread_t in VideoLAN VLC media player 3.0.7.1 allows remote attackers to trigger a heap-based buffer overflow via a crafted .mkv file.
|
Debian_linux, Vlc_media_player
|
7.8
|
|
|
|
2019-08-29
|
CVE-2019-14778
|
The mkv::virtual_segment_c::seek method of demux/mkv/virtual_segment.cpp in VideoLAN VLC media player 3.0.7.1 has a use-after-free.
|
Debian_linux, Vlc_media_player
|
7.8
|
|
|
|
2019-08-29
|
CVE-2019-14777
|
The Control function of demux/mkv/mkv.cpp in VideoLAN VLC media player 3.0.7.1 has a use-after-free.
|
Debian_linux, Vlc_media_player
|
7.8
|
|
|
|
2019-08-29
|
CVE-2019-14776
|
A heap-based buffer over-read exists in DemuxInit() in demux/asf/asf.c in VideoLAN VLC media player 3.0.7.1 via a crafted .mkv file.
|
Debian_linux, Vlc_media_player
|
7.8
|
|
|
|
2019-08-29
|
CVE-2019-14535
|
A divide-by-zero error exists in the SeekIndex function of demux/asf/asf.c in VideoLAN VLC media player 3.0.7.1. As a result, an FPE can be triggered via a crafted WMV file.
|
Debian_linux, Vlc_media_player
|
7.8
|
|
|