lavc_CopyPicture in modules/codec/avcodec/video.c in VideoLAN VLC media player through 3.0.7 has a heap-based buffer over-read because it does not properly validate the width and height.
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade vlc | Nov 8, 2019 | Jul 18, 2019 |
| Debian | — | Upgrade vlc | Aug 22, 2019 | Jul 18, 2019 |
| Freebsd | — | Upgrade vlc | Aug 21, 2019 | Aug 20, 2019 |
| Gentoo Linux | — | Upgrade media-video/vlc. | Sep 9, 2019 | Jul 18, 2019 |
| Suse | — | Upgrade vlc-vdpauUpgrade libvlc5Upgrade vlc-opencvUpgrade vlcUpgrade vlc-noxUpgrade libaom0-64bitUpgrade aom-toolsUpgrade vlc-jackUpgrade libaom0Upgrade libvlccore9Upgrade libaom-develUpgrade libaom-devel-docUpgrade vlc-langUpgrade vlc-develUpgrade vlc-qtUpgrade vlc-codec-gstreamer | Aug 9, 2019 | Jul 18, 2019 |
| Ubuntu | — | Upgrade vlc | Sep 12, 2019 | Jul 18, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub