| Max CVSS | 6.8 | Min CVSS | 4.3 | Total Count | 2 |
| ID | CVSS | Summary | Last (major) update | Published | |
| CVE-2019-14970 | 6.8 |
A vulnerability in mkv::event_thread_t in VideoLAN VLC media player 3.0.7.1 allows remote attackers to trigger a heap-based buffer overflow via a crafted .mkv file.
|
24-08-2020 - 17:37 | 29-08-2019 - 19:15 | |
| CVE-2019-14776 | 6.8 |
A heap-based buffer over-read exists in DemuxInit() in demux/asf/asf.c in VideoLAN VLC media player 3.0.7.1 via a crafted .mkv file.
|
18-08-2020 - 15:05 | 29-08-2019 - 19:15 | |
| CVE-2019-14533 | 6.8 |
The Control function of demux/asf/asf.c in VideoLAN VLC media player 3.0.7.1 has a use-after-free.
|
18-08-2020 - 15:05 | 29-08-2019 - 19:15 | |
| CVE-2019-14535 | 6.8 |
A divide-by-zero error exists in the SeekIndex function of demux/asf/asf.c in VideoLAN VLC media player 3.0.7.1. As a result, an FPE can be triggered via a crafted WMV file.
|
18-08-2020 - 15:05 | 29-08-2019 - 18:15 | |
| CVE-2019-14778 | 6.8 |
The mkv::virtual_segment_c::seek method of demux/mkv/virtual_segment.cpp in VideoLAN VLC media player 3.0.7.1 has a use-after-free.
|
18-08-2020 - 15:05 | 29-08-2019 - 19:15 | |
| CVE-2019-14777 | 6.8 |
The Control function of demux/mkv/mkv.cpp in VideoLAN VLC media player 3.0.7.1 has a use-after-free.
|
18-08-2020 - 15:05 | 29-08-2019 - 19:15 | |
| CVE-2019-14534 | 4.3 |
In VideoLAN VLC media player 3.0.7.1, there is a NULL pointer dereference at the function SeekPercent of demux/asf/asf.c that will lead to a denial of service attack.
|
18-08-2020 - 15:05 | 29-08-2019 - 19:15 | |
| CVE-2019-14498 | 6.8 |
A divide-by-zero error exists in the Control function of demux/caf.c in VideoLAN VLC media player 3.0.7.1. As a result, an FPE can be triggered via a crafted CAF file.
|
18-08-2020 - 15:05 | 29-08-2019 - 18:15 |