Security Advisory

CVE-2019-14437

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2019-08-29 17:30:37
Last updated 2024-08-05 00:19:41
Assigner mitre
State PUBLISHED

Description

The xiph_SplitHeaders function in modules/demux/xiph.h in VideoLAN VLC media player 3.0.7.1 does not check array bounds properly. As a result, a heap-based buffer over-read can be triggered via a crafted .ogg file.