Skip to content
COOEY

EXPOSURES › CVE-2019-13962

CVE-2019-13962

CRITICAL
DETAIL
SourceNVD · cve Published2019-07-18 CVSS9.8 Referencehttps://nvd.nist.gov/vuln/detail/CVE-2019-13962 ↗

▸ RECOMMENDED ACTION  Critical severity — schedule patching of the affected products.

PLAYERS IMPLICATED
canonical · vendordebian · vendoropensuse · vendorvideolan · vendorbackports sle · productdebian linux · productleap · productubuntu linux · productvlc media player · product
DESCRIPTION

lavc_CopyPicture in modules/codec/avcodec/video.c in VideoLAN VLC media player through 3.0.7 has a heap-based buffer over-read because it does not properly validate the width and height.

SENTIMENT · TRUSTED SOURCES
synthesis neutral +0.00
No coverage found for Canonical in the provided sources; sources are unrelated to the event.
cooey ↗ neutral +0.00
Irrelevant source; no coverage of Canonical or CVE-2019-13962.
127.0.0.1 ↗ neutral +0.00
Irrelevant source; no coverage of Canonical or CVE-2019-13962.
AFFECTED FEDRAMP PRODUCTS · 0
No correlated FedRAMP products.