CVE-2019-14776

A heap-based buffer over-read exists in DemuxInit() in demux/asf/asf.c in VideoLAN VLC media player 3.0.7.1 via a crafted .mkv file

published August 29, 2019

CVSS
—
EPSS
2%
Percentile
74.7
In the wild
Unconfirmed
What it is

A heap-based buffer over-read exists in DemuxInit() in demux/asf/asf.c in VideoLAN VLC media player 3.0.7.1 via a crafted .mkv file.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01537 · 74.7th percentile
Published
2019-08-29T18:45Z
EPSS history
Timeline
  • 29 AUG 18:45Z
    A heap-based buffer over-read exists in DemuxInit() in demux/asf/asf.c in VideoLAN VLC media player 3.0.7.1 via a crafted .mkv file
    cvelistv5