Unrated

The xiph_SplitHeaders function in modules/demux/xiph.h in VideoLAN VLC media player 3.0.7.1 does not check array bounds properly. As a result, a heap-...

CVE-2019-14437 First seen on SecPulse Aug 30, 2019

Fix status by distribution

Fixed packages published by each distribution for this CVE

Debian DEBIAN-CVE-2019-14437 vlc Fixed in: 3.0.8-1

Original description The description as published by the source.

The xiph_SplitHeaders function in modules/demux/xiph.h in VideoLAN VLC media player 3.0.7.1 does not check array bounds properly. As a result, a heap-based buffer over-read can be triggered via a crafted .ogg file.

Source: OSV.dev (Open Source Vulnerabilities) NVD OSV

References

advisory seclists.org
advisory security.gentoo.org
advisory debian.org
patch git.videolan.org
patch videolan.org
web lists.opensuse.org
web lists.opensuse.org
web usn.ubuntu.com

Key facts

Severity: Unrated
Published: Aug 30, 2019
First seen on SecPulse: Aug 30, 2019

NVD OSV

Detection sources

OSV.dev (Open Source Vulnerabilities)Oct 20, 19:52