Unrated
A heap-based buffer over-read exists in DemuxInit() in demux/asf/asf.c in VideoLAN VLC media player 3.0.7.1 via a crafted .mkv file.
CVE-2019-14776
First seen on SecPulse
Fix status by distribution
Fixed packages published by each distribution for this CVE
- Debian DEBIAN-CVE-2019-14776 vlc Fixed in: 3.0.8-1
References
- advisory seclists.org
- advisory security.gentoo.org
- advisory debian.org
- patch git.videolan.org
- patch videolan.org
- web lists.opensuse.org
- web lists.opensuse.org
- web usn.ubuntu.com