CVE-2019-13962: Critical severity Videolan VLC Media Player vulnerability
Last updated 24 July 2024
Other sources
lavcCopyPicture in modules/codec/avcodec/video.c in VideoLAN VLC media player through 3.0.7 has a heap-based buffer over-read because it does not properly validate the width and height.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/vlcto a version that resolves this vulnerability.Fixed in 3.0.23-0+deb12u1Fixed in 3.0.24-0+deb12u1Fixed in 3.0.23-0+deb13u1Fixed in 3.0.24-0+deb13u1Fixed in 3.0.24-4 - Upgrade
Upgrade
alpine/vlcto a version that resolves this vulnerability.Fixed in 3.0.8-r0
Event History
Frequently Asked Questions
What is CVE-2019-13962?
CVE-2019-13962 is a vulnerability in the VideoLAN VLC media player that allows for a heap-based buffer over-read.
How severe is CVE-2019-13962?
CVE-2019-13962 has a severity rating of 9.8, which is considered critical.
What is the affected software for CVE-2019-13962?
The affected software for CVE-2019-13962 includes VideoLAN VLC media player versions up to 3.0.7.
How can I fix CVE-2019-13962?
You can fix CVE-2019-13962 by updating to VLC media player version 3.0.8 or later.
Where can I find more information about CVE-2019-13962?
You can find more information about CVE-2019-13962 in the references provided.