CVE-2019-5459: Integer Underflow
An Integer underflow in VLC Media Player versions < 3.0.7 leads to an out-of-band read.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
VLC Media Playerto a version that resolves this vulnerability.Fixed in 3.0.7
Event History
Frequently Asked Questions
What is CVE-2019-5459?
CVE-2019-5459 is an Integer underflow vulnerability in VLC Media Player versions < 3.0.7 that leads to an out-of-band read.
What software versions are affected by CVE-2019-5459?
VLC Media Player versions < 3.0.7 are affected by CVE-2019-5459.
What is the severity of CVE-2019-5459?
CVE-2019-5459 has a severity rating of 7.1 (high).
How can I fix CVE-2019-5459?
To fix CVE-2019-5459, upgrade to VLC Media Player version 3.0.7 or later.
Where can I find more information about CVE-2019-5459?
You can find more information about CVE-2019-5459 at the following references: [link1](http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00005.html), [link2](http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00037.html), [link3](http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00040.html).