CVE-2019-14534: Null Pointer Dereference
In VideoLAN VLC media player 3.0.7.1, there is a NULL pointer dereference at the function SeekPercent of demux/asf/asf.c that will lead to a denial of service attack.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is CVE-2019-14534?
CVE-2019-14534 is a vulnerability in VideoLAN VLC media player 3.0.7.1 that allows for a denial of service attack due to a NULL pointer dereference.
What is the severity of CVE-2019-14534?
The severity of CVE-2019-14534 is medium (5.5).
How can I fix CVE-2019-14534?
To fix CVE-2019-14534, update VLC media player to version 3.0.8-0ubuntu18.04.1 or later.
Are there any references for CVE-2019-14534?
Yes, you can find references for CVE-2019-14534 at the following links: - http://git.videolan.org/?p=vlc.git&a=search&h=refs/heads/master&st=commit&s=cve-2019 - http://lists.opensuse.org/opensuse-security-announce/2020-04/msg00036.html - http://lists.opensuse.org/opensuse-security-announce/2020-04/msg00046.html
What is the CWE ID associated with CVE-2019-14534?
The CWE ID associated with CVE-2019-14534 is 476.