CVE-2019-14535: Divide by Zero
A divide-by-zero error exists in the SeekIndex function of demux/asf/asf.c in VideoLAN VLC media player 3.0.7.1. As a result, an FPE can be triggered via a crafted WMV file.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is CVE-2019-14535?
CVE-2019-14535 is a vulnerability in VideoLAN VLC media player 3.0.7.1 that allows for a divide-by-zero error in the SeekIndex function of demux/asf/asf.c.
What is the severity of CVE-2019-14535?
CVE-2019-14535 has a severity rating of 7.8 (high).
How does CVE-2019-14535 affect the affected software?
CVE-2019-14535 affects VideoLAN VLC media player versions 3.0.7.1, 3.0.8-0ubuntu18.04.1, 3.0.8-0ubuntu19.04.1, 3.0.8-1, and 3.0.18-0+deb11u1.
What is the remedy for CVE-2019-14535 on Ubuntu?
The recommended remedy for CVE-2019-14535 on Ubuntu is to update VLC media player to version 3.0.8-0ubuntu18.04.1 or later.
What is the remedy for CVE-2019-14535 on Debian?
The recommended remedy for CVE-2019-14535 on Debian is to update VLC media player to version 3.0.17.4-0+deb10u1 or later.