An Integer underflow in VLC Media Player versions < 3.0.7 leads to an out-of-band read.
CVSS Details
- CVSS 3.1 Base Score: 7.1
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade vlc | Aug 6, 2019 | Jul 30, 2019 |
| Suse | — | Upgrade vlc-jackUpgrade vlcUpgrade vlc-develUpgrade aom-toolsUpgrade libaom-devel-docUpgrade libaom0-64bitUpgrade vlc-vdpauUpgrade vlc-noxUpgrade libvlc5Upgrade vlc-codec-gstreamerUpgrade libvlccore9Upgrade libaom0Upgrade libaom-develUpgrade vlc-qtUpgrade vlc-lang | Aug 9, 2019 | Jul 30, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub