CVE-2019-13962

심각 9.8CVE-2019-13962 · Published 18/07/2019 · updated 08/10/2026

요약

CVE-2019-13962은(는) backports sle (opensuse), vlc media player (videolan)에 영향을 주는 심각 (CVSS 9.8) 취약점입니다.
향후 30일 내 악용 확률(EPSS): 3.7%, 전체 취약점의 89.7%보다 높음.
아직 패치 버전 정보가 없습니다. 참고 자료의 공급업체 권고를 확인하세요.

Package	Affected versions	Patched versions
backports sle opensuse	`= 15.0`	No fix yet
vlc media player videolan	`≤ 3.0.7`	No fix yet

Description

lavc_CopyPicture in modules/codec/avcodec/video.c in VideoLAN VLC media player through 3.0.7 has a heap-based buffer over-read because it does not properly validate the width and height.

References

git.videolan.org
lists.opensuse.org/opensuse-security-announce/2019-08/msg00005.html · Mailing List
lists.opensuse.org/opensuse-security-announce/2019-08/msg00037.html · Mailing List
lists.opensuse.org/opensuse-security-announce/2019-08/msg00040.html · Mailing List
lists.opensuse.org/opensuse-security-announce/2019-08/msg00081.html · Mailing List
lists.opensuse.org/opensuse-security-announce/2020-04/msg00036.html · Mailing List
lists.opensuse.org/opensuse-security-announce/2020-04/msg00046.html · Mailing List
securityfocus.com/bid/109306 · Broken Link
seclists.org/bugtraq/2019/Aug/36 · Mailing List
security.gentoo.org/glsa/201909-02 · Third Party Advisory
trac.videolan.org/vlc/ticket/22240

backports sle의 다른 취약점

모두 보기 →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free