Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

4 records

Advisory: VideoLAN VLC — DSA-3899 Clear all filters
TI-2017-05878 CVE-2017-8313 · GHSA-x47q-49w5-cg3q

Out-of-bounds read in VideoLAN VLC

Priority LOW 28

Heap out-of-bound read in ParseJSS in VideoLAN VLC before 2.2.5 due to missing check of string termination allows attackers to read data beyond allocated memory and potentially crash the process via a crafted subtitles f…

CVSS 3.0MEDIUM 5.5 Local No auth User interaction EPSS 0.01481 Published 2017-05-23 Fixed in 2.2.5 CWE-125
TI-2017-05877 CVE-2017-8312 · GHSA-f5gw-wx32-xw5r

Out-of-bounds read in VideoLAN VLC

Priority LOW 28

Heap out-of-bound read in ParseJSS in VideoLAN VLC due to missing check of string length allows attackers to read heap uninitialized data via a crafted subtitles file.

CVSS 3.0MEDIUM 5.5 Local No auth User interaction EPSS 0.01358 Published 2017-05-23 No fix listed CWE-125
TI-2017-05876 CVE-2017-8311 · GHSA-h3gx-7f25-5jxg

Memory corruption in VideoLAN VLC

Priority MEDIUM 45

Potential heap based buffer overflow in ParseJSS in VideoLAN VLC before 2.2.5 due to skipping NULL terminator in an input string allows attackers to execute arbitrary code via a crafted subtitles file.

CVSS 3.0HIGH 7.8 Local No auth User interaction EPSS 0.08765 Published 2017-05-23 Fixed in 2.2.5 CWE-119
TI-2017-05875 CVE-2017-8310 · GHSA-2ggh-fcw2-8mvr

Out-of-bounds read in VideoLAN VLC

Priority LOW 27

Heap out-of-bound read in CreateHtmlSubtitle in VideoLAN VLC 2.2.x due to missing check of string termination allows attackers to read data beyond allocated memory and potentially crash the process (causing a denial of s…

CVSS 3.0MEDIUM 5.5 Local No auth User interaction EPSS 0.01264 Published 2017-05-23 No fix listed CWE-125