CVE-2019-14533: Use After Free
Last updated 26 August 2025
Other sources
The Control function of demux/asf/asf.c in VideoLAN VLC media player 3.0.7.1 has a use-after-free.
— MITRE
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is CVE-2019-14533?
CVE-2019-14533 is a vulnerability in the Control function of demux/asf/asf.c in VideoLAN VLC media player 3.0.7.1 that leads to a use-after-free.
What is the severity of CVE-2019-14533?
CVE-2019-14533 has a severity rating of 7.8 (high).
Which versions of the affected software are vulnerable to CVE-2019-14533?
The following versions of the affected software are vulnerable to CVE-2019-14533: VLC media player 3.0.7.1, VLC media player 3.0.8-0ubuntu18.04.1, VLC media player 3.0.8-0ubuntu19.04.1, VLC media player 3.0.8-1, VLC media player 3.0.17.4-0+deb10u1, VLC media player 3.0.17.4-0+deb10u2, VLC media player 3.0.18-0+deb11u1, VLC media player 3.0.18-2, VLC media player 3.0.19-1.
How can I fix CVE-2019-14533?
To fix CVE-2019-14533, update your VLC media player to version 3.0.8-0ubuntu18.04.1 or higher.
Where can I find more information about CVE-2019-14533?
More information about CVE-2019-14533 can be found at the following references: [Git.Videolan.org](http://git.videolan.org/?p=vlc.git&a=search&h=refs/heads/master&st=commit&s=cve-2019), [OpenSUSE Security Announcement](http://lists.opensuse.org/opensuse-security-announce/2020-04/msg00036.html), [OpenSUSE Security Announcement](http://lists.opensuse.org/opensuse-security-announce/2020-04/msg00046.html).