Unrated

A buffer overflow vulnerability in the AVI_ExtractSubtitle component of VideoLAN VLC Media Player 3.0.11 allows attackers to cause an out-of-bounds re...

CVE-2021-25802 First seen on SecPulse Jul 27, 2021

Fix status by distribution

Fixed packages published by each distribution for this CVE

Debian DEBIAN-CVE-2021-25802 vlc Fixed in: 3.0.12-1

Original description The description as published by the source.

A buffer overflow vulnerability in the AVI_ExtractSubtitle component of VideoLAN VLC Media Player 3.0.11 allows attackers to cause an out-of-bounds read via a crafted .avi file.

Source: OSV.dev (Open Source Vulnerabilities) NVD OSV

References

patch code.videolan.org

Key facts

Severity: Unrated
Published: Jul 27, 2021
First seen on SecPulse: Jul 27, 2021

NVD OSV

Detection sources

OSV.dev (Open Source Vulnerabilities)Oct 20, 19:54