An off-by-one error in the DecodeBlock function in codec/sdl_image.c in VideoLAN VLC media player before 3.0.9 allows remote attackers to cause a denial of service (memory corruption) via a crafted image file. NOTE: this may be related to the SDL_Image product.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade vlc | Jun 16, 2020 | May 15, 2020 |
| Debian | — | Upgrade vlc | May 29, 2020 | May 15, 2020 |
| Gentoo Linux | — | Upgrade media-video/vlc. | Jun 15, 2020 | May 15, 2020 |
| Ubuntu | — | Upgrade vlc-plugin-access-extra (Ubuntu Pro)Upgrade vlc-plugin-access-extraUpgrade vlc (Ubuntu Pro)Upgrade vlc | Jun 21, 2023 | May 15, 2020 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub