CVE-2019-13962CWE-125

CVE-2019-13962

Critical · published July 19, 2019

CVSS v3.1
9.8
EPSS
4%
Percentile
89.7
In the wild
Unconfirmed
What it is

⚠️ A sneaky buffer over-read lurks in VLC Media Player up to version 3.0.7, which could allow attackers to peek at more data than they should! Think of it like a delivery driver who opens a box without checking the label, risking a peek at the contents destined for someone else. Without proper validation of dimensions, VLC might accidentally browse data it shouldn’t see! While there's no known exploit yet, this buffer over-read could lead to unauthorized access to sensitive memory data, potentially harming users or applications that rely on VLC. It’s like leaving the door slightly ajar and hoping no one notices!

Put simply

Think of it like a delivery driver who opens a box without checking the label, risking a peek at the contents destined for someone else. Without proper validation of dimensions, VLC might accidentally browse data it shouldn’t see! This vulnerability stems from the lavc_CopyPicture function in VideoLAN's VLC media player that fails to validate the width and height, allowing a malicious actor to read beyond intended memory bounds, leading to exposure of sensitive information.

What to do

While there's no known exploit yet, this buffer over-read could lead to unauthorized access to sensitive memory data, potentially harming users or applications that rely on VLC. It’s like leaving the door slightly ajar and hoping no one notices! To safeguard against this vulnerability, upgrade VLC to version 3.0.8 or later immediately. Additionally, keep an eye on future updates from the VideoLAN team to ensure your media player remains secure. You've got this! Patch VLC today and keep your media experience secure! 🛡️

The record
Technical detail
CVSS v3.1
9.8 · CRITICAL
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.03700 · 89.7th percentile
Weakness
CWE-125 · Out-of-bounds Read
Published
2019-07-19T00:15Z
Affected products (9)
ProductVersionsFixed in
videolan/vlc_media_player≤ 3.0.7—
opensuse/backports_sleall versions—
opensuse/backports_sleall versions—
opensuse/leapall versions—
opensuse/leapall versions—
debian/debian_linuxall versions—
debian/debian_linuxall versions—
canonical/ubuntu_linuxall versions—
canonical/ubuntu_linuxall versions—
References (26)
http://git.videolan.org/?p=vlc/vlc-3.0.git%3Ba=commit%3Bh=2b4f9d0b0e0861f262c90e9b9b94e7d53b864509 · [email protected]http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00005.html · [email protected]http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00037.html · [email protected]http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00040.html · [email protected]http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00081.html · [email protected]http://lists.opensuse.org/opensuse-security-announce/2020-04/msg00036.html · [email protected]http://lists.opensuse.org/opensuse-security-announce/2020-04/msg00046.html · [email protected]http://www.securityfocus.com/bid/109306 · [email protected]https://seclists.org/bugtraq/2019/Aug/36 · [email protected]https://security.gentoo.org/glsa/201909-02 · [email protected]https://trac.videolan.org/vlc/ticket/22240 · [email protected]https://usn.ubuntu.com/4131-1/ · [email protected]https://www.debian.org/security/2019/dsa-4504 · [email protected]http://git.videolan.org/?p=vlc/vlc-3.0.git%3Ba=commit%3Bh=2b4f9d0b0e0861f262c90e9b9b94e7d53b864509 · af854a3a-2127-422b-91ae-364da2661108http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00005.html · af854a3a-2127-422b-91ae-364da2661108http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00037.html · af854a3a-2127-422b-91ae-364da2661108http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00040.html · af854a3a-2127-422b-91ae-364da2661108http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00081.html · af854a3a-2127-422b-91ae-364da2661108http://lists.opensuse.org/opensuse-security-announce/2020-04/msg00036.html · af854a3a-2127-422b-91ae-364da2661108http://lists.opensuse.org/opensuse-security-announce/2020-04/msg00046.html · af854a3a-2127-422b-91ae-364da2661108http://www.securityfocus.com/bid/109306 · af854a3a-2127-422b-91ae-364da2661108https://seclists.org/bugtraq/2019/Aug/36 · af854a3a-2127-422b-91ae-364da2661108https://security.gentoo.org/glsa/201909-02 · af854a3a-2127-422b-91ae-364da2661108https://trac.videolan.org/vlc/ticket/22240 · af854a3a-2127-422b-91ae-364da2661108https://usn.ubuntu.com/4131-1/ · af854a3a-2127-422b-91ae-364da2661108https://www.debian.org/security/2019/dsa-4504 · af854a3a-2127-422b-91ae-364da2661108
EPSS history
Timeline
  • 18 JUL 19:58Z
    lavc_CopyPicture in modules/codec/avcodec/video.c in VideoLAN VLC media player through 3.0.7 has a heap-based buffer over-read because it does not properly…
    cvelistv5