vlc_media_player Archives - CVE Vulnerability

CVE-2018-11516

Sun, 26 Feb 2023 06:45:17 +0000

The vlc_demux_chained_Delete function in input/demux_chained.c in VideoLAN VLC media player 3.0.1 allows remote attackers to cause a denial of service (heap corruption and application crash) or possibly have unspecified other impact via a crafted .swf file.

The post CVE-2018-11516 appeared first on CVE Vulnerability.

CVE-2020-26664

Sun, 26 Feb 2023 06:40:05 +0000

A vulnerability in EbmlTypeDispatcher::send in VideoLAN VLC media player 3.0.11 allows attackers to trigger a heap-based buffer overflow via a crafted .mkv file.

The post CVE-2020-26664 appeared first on CVE Vulnerability.

CVE-2020-13428

Sun, 26 Feb 2023 06:36:56 +0000

A heap-based buffer overflow in the hxxx_AnnexB_to_xVC function in modules/packetizer/hxxx_nal.c in VideoLAN VLC media player before 3.0.11 for macOS/iOS allows remote attackers to cause a denial of service (application crash) or execute arbitrary code via a crafted H.264 Annex-B video (.avi for example) file.

The post CVE-2020-13428 appeared first on CVE Vulnerability.

CVE-2019-5460

Sun, 26 Feb 2023 06:33:39 +0000

Double Free in VLC versions <= 3.0.6 leads to a crash.

The post CVE-2019-5460 appeared first on CVE Vulnerability.

CVE-2019-5459

Sun, 26 Feb 2023 06:33:39 +0000

An Integer underflow in VLC Media Player versions < 3.0.7 leads to an out-of-band read.

The post CVE-2019-5459 appeared first on CVE Vulnerability.

CVE-2019-19721

Sun, 26 Feb 2023 06:32:10 +0000

An off-by-one error in the DecodeBlock function in codec/sdl_image.c in VideoLAN VLC media player before 3.0.9 allows remote attackers to cause a denial of service (memory corruption) via a crafted image file. NOTE: this may be related to the SDL_Image product.

The post CVE-2019-19721 appeared first on CVE Vulnerability.

CVE-2019-18278

Sun, 26 Feb 2023 06:31:43 +0000

When executing VideoLAN VLC media player 3.0.8 with libqt on Windows, Data from a Faulting Address controls Code Flow starting at libqt_plugin!vlc_entry_license__3_0_0f+0x00000000003b9aba. NOTE: the VideoLAN security team indicates that they have not been contacted, and have no way of reproducing this issue.

The post CVE-2019-18278 appeared first on CVE Vulnerability.

CVE-2019-14970

Sun, 26 Feb 2023 06:30:46 +0000

A vulnerability in mkv::event_thread_t in VideoLAN VLC media player 3.0.7.1 allows remote attackers to trigger a heap-based buffer overflow via a crafted .mkv file.

The post CVE-2019-14970 appeared first on CVE Vulnerability.

CVE-2019-14778

Sun, 26 Feb 2023 06:30:41 +0000

The mkv::virtual_segment_c::seek method of demux/mkv/virtual_segment.cpp in VideoLAN VLC media player 3.0.7.1 has a use-after-free.

The post CVE-2019-14778 appeared first on CVE Vulnerability.

CVE-2019-14777

Sun, 26 Feb 2023 06:30:41 +0000

The Control function of demux/mkv/mkv.cpp in VideoLAN VLC media player 3.0.7.1 has a use-after-free.

The post CVE-2019-14777 appeared first on CVE Vulnerability.