Description
lavc_CopyPicture in modules/codec/avcodec/video.c in VideoLAN VLC media player through 3.0.7 has a heap-based buffer over-read because it does not properly validate the width and height.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
n/a n/a
n/aaffected
References
- http://git.videolan.org/?p=vlc/vlc-3.0.git%3Ba=commit%3Bh=2b4f9d0b0e0861f262c90e9b9b94e7d53b864509 ↗
- https://trac.videolan.org/vlc/ticket/22240 ↗
- http://www.securityfocus.com/bid/109306 ↗
- http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00005.html ↗
- http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00040.html ↗
- http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00037.html ↗
- https://www.debian.org/security/2019/dsa-4504 ↗
- https://seclists.org/bugtraq/2019/Aug/36 ↗
- http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00081.html ↗
- https://security.gentoo.org/glsa/201909-02 ↗
- https://usn.ubuntu.com/4131-1/ ↗
- http://lists.opensuse.org/opensuse-security-announce/2020-04/msg00036.html ↗
- http://lists.opensuse.org/opensuse-security-announce/2020-04/msg00046.html ↗