CVE-2019-14778: Use After Free
Last updated 26 August 2025
Other sources
The mkv::virtualsegmentc::seek method of demux/mkv/virtualsegment.cpp in VideoLAN VLC media player 3.0.7.1 has a use-after-free.
— MITRE
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2019-14778?
The severity of CVE-2019-14778 is high with a severity value of 7.8.
How does CVE-2019-14778 affect VideoLAN VLC media player?
CVE-2019-14778 affects VideoLAN VLC media player version 3.0.7.1.
How can I fix CVE-2019-14778 in Ubuntu?
To fix CVE-2019-14778 in Ubuntu, update VLC media player to version 3.0.8-0ubuntu18.04.1 or later.
How can I fix CVE-2019-14778 in Debian?
To fix CVE-2019-14778 in Debian, update VLC media player to version 3.0.17.4-0+deb10u1 or later.
Where can I find more information about CVE-2019-14778?
You can find more information about CVE-2019-14778 in the following references: [Link 1](http://git.videolan.org/?p=vlc.git&a=search&h=refs/heads/master&st=commit&s=cve-2019), [Link 2](http://lists.opensuse.org/opensuse-security-announce/2020-04/msg00036.html), [Link 3](http://lists.opensuse.org/opensuse-security-announce/2020-04/msg00046.html).