vulnerability context

CVE-2019-13962

CVSS 9.8 CRITICALEPSS 87%CWE-125

lavc_CopyPicture in modules/codec/avcodec/video.c in VideoLAN VLC media player through 3.0.7 has a heap-based buffer over-read because it does not properly validate the width and height.

Published 2019-07-18 · last modified 2024-11-21

details

CISA KEV status: Not in catalog
CVSS v3: 9.8 / CRITICAL
CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS: 87% percentile (score 0.0323)
CWE: CWE-125

View on NVD → · cve.org

source mentions 1

[boredchilada] ~Cisa~ ABB Ability Camera Connect <=1.5.0.14 contains critical vulnerabilities via an outdated bundled VLC media pl...Bluesky · 14d ago

source consensus

Bluesky1×

Want the 3-bullet summary of CVE-2019-13962, plus webhook alerts when KEV is updated? Pro is $10/mo.

Open in reader See Pro →