lavc_CopyPicture in modules/codec/avcodec/video.c in VideoLAN VLC media player through 3.0.7 has a heap-based buffer over-read because it does not properly validate the width and height.
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade vlc | Nov 8, 2019 | Jul 18, 2019 |
| Debian | — | Upgrade vlc | Aug 22, 2019 | Jul 18, 2019 |
| Freebsd | — | Upgrade vlc | Aug 21, 2019 | Aug 20, 2019 |
| Gentoo Linux | — | Upgrade media-video/vlc. | Sep 9, 2019 | Jul 18, 2019 |
| Suse | — | Upgrade libvlccore9Upgrade vlc-qtUpgrade libaom0Upgrade vlc-codec-gstreamerUpgrade vlc-develUpgrade libaom-devel-docUpgrade vlc-langUpgrade libaom-develUpgrade aom-toolsUpgrade vlc-noxUpgrade vlc-jackUpgrade vlcUpgrade libaom0-64bitUpgrade vlc-opencvUpgrade vlc-vdpauUpgrade libvlc5 | Aug 9, 2019 | Jul 18, 2019 |
| Ubuntu | — | Upgrade vlc | Sep 12, 2019 | Jul 18, 2019 |
Prioritize with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub