CVE-2019-14777: Use After Free
Last updated 26 August 2025
Other sources
The Control function of demux/mkv/mkv.cpp in VideoLAN VLC media player 3.0.7.1 has a use-after-free.
— MITRE
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/vlcto a version that resolves this vulnerability.Fixed in 3.0.23-0+deb12u1Fixed in 3.0.23-0+deb13u1Fixed in 3.0.24-0+deb13u1Fixed in 3.0.24-3
Event History
Frequently Asked Questions
What is the vulnerability CVE-2019-14777?
The vulnerability CVE-2019-14777 is a use-after-free vulnerability in the Control function of demux/mkv/mkv.cpp in VideoLAN VLC media player 3.0.7.1.
How does the vulnerability CVE-2019-14777 affect VLC media player?
The vulnerability CVE-2019-14777 can be exploited to execute arbitrary code or cause a denial-of-service condition.
What is the severity of the vulnerability CVE-2019-14777?
The severity of the vulnerability CVE-2019-14777 is rated as high with a CVSS score of 7.8.
What are the affected versions of VLC media player?
The affected versions of VLC media player include 3.0.7.1.
How can I fix the vulnerability CVE-2019-14777 in VLC media player?
To fix the vulnerability CVE-2019-14777 in VLC media player, update to version 3.0.8-0ubuntu18.04.1 or later.