Unrated

A vulnerability in mkv::event_thread_t in VideoLAN VLC media player 3.0.7.1 allows remote attackers to trigger a heap-based buffer overflow via a craf...

CVE-2019-14970 First seen on SecPulse Aug 30, 2019

Fix status by distribution

Fixed packages published by each distribution for this CVE

Debian DEBIAN-CVE-2019-14970 vlc Fixed in: 3.0.8-1

Original description The description as published by the source.

A vulnerability in mkv::event_thread_t in VideoLAN VLC media player 3.0.7.1 allows remote attackers to trigger a heap-based buffer overflow via a crafted .mkv file.

Source: OSV.dev (Open Source Vulnerabilities) NVD OSV

References

advisory seclists.org
advisory security.gentoo.org
advisory debian.org
patch git.videolan.org
patch videolan.org
web lists.opensuse.org
web lists.opensuse.org
web usn.ubuntu.com

Key facts

Severity: Unrated
Published: Aug 30, 2019
First seen on SecPulse: Aug 30, 2019

NVD OSV

Detection sources

OSV.dev (Open Source Vulnerabilities)Oct 20, 19:52