CVE-2019-14437
HighCVSS 7.8Exploitation Probability (EPSS)
Elevated risk74th percentile - higher than 74% of all known CVEs
Summary
The xiph_SplitHeaders function in modules/demux/xiph.h in VideoLAN VLC media player 3.0.7.1 does not check array bounds properly. A heap-based buffer over-read can be triggered via a crafted .ogg file.
Risk Assessment
Opening a malicious .ogg file may crash the player or potentially leak memory data.
Recommendation
Update VLC media player to a patched version and avoid opening .ogg files from untrusted sources.
Other vulnerabilities in VideoLAN VLC media player
See all- CVE-2011-3623High
Multiple stack-based buffer overflows in VideoLAN VLC media player before version 1.0.2 allow remote attackers to execute arbitrary code via crafted ASF, AVI, or MP4 files.
- CVE-2010-1445High
A heap-based buffer overflow in VideoLAN VLC media player before version 1.0.6 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted byte stream in an RTMP session.
- CVE-2010-1444High
The ZIP archive decompressor in VideoLAN VLC media player before version 1.0.6 allows remote attackers to cause a denial of service (invalid memory access and application crash) or possibly execute arbitrary code via a crafted archive.
- CVE-2010-1442High
VideoLAN VLC media player before version 1.0.6 allows remote attackers to cause a denial of service (invalid memory access and application crash) or possibly execute arbitrary code via a crafted byte stream to the (1) AVI, (2) ASF, or (3) Matroska (aka MKV) demuxer.
- CVE-2010-1441High
Multiple heap-based buffer overflows in VideoLAN VLC media player before version 1.0.6 allow remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted byte stream to the A/52, DTS, or MPEG Audio decoder.
- CVE-2018-19857Critical
The CAF demuxer in modules/demux/caf.c in VideoLAN VLC media player 3.0.4 may read memory from an uninitialized pointer when processing magic cookies in CAF files, because a ReadKukiChunk() cast converts a return value to an unsigned int even if that value is negative. This could result in a denial of service and/or a potential infoleak.
- CVE-2014-6440Critical
VideoLAN VLC media player before 2.1.5 allows remote attackers to execute arbitrary code or cause a denial of service.
- CVE-2016-5108Critical
Buffer overflow in the DecodeAdpcmImaQT function in VideoLAN VLC media player before version 2.2.4 allows remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via a crafted QuickTime IMA file.
- CVE-2019-14778High
The mkv::virtual_segment_c::seek method of demux/mkv/virtual_segment.cpp in VideoLAN VLC media player 3.0.7.1 has a use-after-free.
- CVE-2019-14777High
The Control function of demux/mkv/mkv.cpp in VideoLAN VLC media player 3.0.7.1 has a use-after-free.
Original NVD description (English source)
The xiph_SplitHeaders function in modules/demux/xiph.h in VideoLAN VLC media player 3.0.7.1 does not check array bounds properly. As a result, a heap-based buffer over-read can be triggered via a crafted .ogg file.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS