Max CVSS 7.5 Min CVSS 4.3 Total Count2
IDCVSSSummaryLast (major) updatePublished
CVE-2019-13962 7.5
lavc_CopyPicture in modules/codec/avcodec/video.c in VideoLAN VLC media player through 3.0.7 has a heap-based buffer over-read because it does not properly validate the width and height.
18-04-2022 - 17:00 18-07-2019 - 20:15
CVE-2019-14437 6.8
The xiph_SplitHeaders function in modules/demux/xiph.h in VideoLAN VLC media player 3.0.7.1 does not check array bounds properly. As a result, a heap-based buffer over-read can be triggered via a crafted .ogg file.
24-08-2020 - 17:37 29-08-2019 - 18:15
CVE-2019-14970 6.8
A vulnerability in mkv::event_thread_t in VideoLAN VLC media player 3.0.7.1 allows remote attackers to trigger a heap-based buffer overflow via a crafted .mkv file.
24-08-2020 - 17:37 29-08-2019 - 19:15
CVE-2019-14776 6.8
A heap-based buffer over-read exists in DemuxInit() in demux/asf/asf.c in VideoLAN VLC media player 3.0.7.1 via a crafted .mkv file.
18-08-2020 - 15:05 29-08-2019 - 19:15
CVE-2019-14533 6.8
The Control function of demux/asf/asf.c in VideoLAN VLC media player 3.0.7.1 has a use-after-free.
18-08-2020 - 15:05 29-08-2019 - 19:15
CVE-2019-14438 6.8
A heap-based buffer over-read in xiph_PackHeaders() in modules/demux/xiph.h in VideoLAN VLC media player 3.0.7.1 allows remote attackers to trigger a heap-based buffer over-read via a crafted .ogg file.
18-08-2020 - 15:05 29-08-2019 - 18:15
CVE-2019-14535 6.8
A divide-by-zero error exists in the SeekIndex function of demux/asf/asf.c in VideoLAN VLC media player 3.0.7.1. As a result, an FPE can be triggered via a crafted WMV file.
18-08-2020 - 15:05 29-08-2019 - 18:15
CVE-2019-14778 6.8
The mkv::virtual_segment_c::seek method of demux/mkv/virtual_segment.cpp in VideoLAN VLC media player 3.0.7.1 has a use-after-free.
18-08-2020 - 15:05 29-08-2019 - 19:15
CVE-2019-14777 6.8
The Control function of demux/mkv/mkv.cpp in VideoLAN VLC media player 3.0.7.1 has a use-after-free.
18-08-2020 - 15:05 29-08-2019 - 19:15
CVE-2019-14534 4.3
In VideoLAN VLC media player 3.0.7.1, there is a NULL pointer dereference at the function SeekPercent of demux/asf/asf.c that will lead to a denial of service attack.
18-08-2020 - 15:05 29-08-2019 - 19:15
CVE-2019-14498 6.8
A divide-by-zero error exists in the Control function of demux/caf.c in VideoLAN VLC media player 3.0.7.1. As a result, an FPE can be triggered via a crafted CAF file.
18-08-2020 - 15:05 29-08-2019 - 18:15
Back to Top Mark selected
Back to Top