Vulnerabilities > Videolan > VLC Media Player > High
| DATE | CVE | VULNERABILITY TITLE | RISK |
|---|---|---|---|
| 2020-01-24 | CVE-2014-9630 | Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in Videolan VLC Media Player The rtp_packetize_xiph_config function in modules/stream_out/rtpfmt.c in VideoLAN VLC media player before 2.1.6 uses a stack-allocation approach with a size determined by arbitrary input data, which allows remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via a crafted length value. | 7.8 |
| 2020-01-24 | CVE-2014-9629 | Classic Buffer Overflow vulnerability in Videolan VLC Media Player Integer overflow in the Encode function in modules/codec/schroedinger.c in VideoLAN VLC media player before 2.1.6 and 2.2.x before 2.2.1 allows remote attackers to conduct buffer overflow attacks and execute arbitrary code via a crafted length value. | 7.8 |
| 2020-01-24 | CVE-2014-9628 | Classic Buffer Overflow vulnerability in Videolan VLC Media Player The MP4_ReadBox_String function in modules/demux/mp4/libmp4.c in VideoLAN VLC media player before 2.1.6 allows remote attackers to trigger an unintended zero-size malloc and conduct buffer overflow attacks, and consequently execute arbitrary code, via a box size of 7. | 7.8 |
| 2020-01-24 | CVE-2014-9627 | Incorrect Type Conversion or Cast vulnerability in Videolan VLC Media Player The MP4_ReadBox_String function in modules/demux/mp4/libmp4.c in VideoLAN VLC media player before 2.1.6 performs an incorrect cast operation from a 64-bit integer to a 32-bit integer, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via a large box size. | 7.8 |
| 2020-01-24 | CVE-2014-9626 | Integer Underflow (Wrap or Wraparound) vulnerability in Videolan VLC Media Player Integer underflow in the MP4_ReadBox_String function in modules/demux/mp4/libmp4.c in VideoLAN VLC media player before 2.1.6 allows remote attackers to cause a denial of service or possibly have unspecified other impact via a box size less than 7. | 7.8 |
| 2020-01-24 | CVE-2014-9625 | Classic Buffer Overflow vulnerability in Videolan VLC Media Player The GetUpdateFile function in misc/update.c in the Updater in VideoLAN VLC media player before 2.1.6 performs an incorrect cast operation from a 64-bit integer to a 32-bit integer, which allows remote attackers to conduct buffer overflow attacks and execute arbitrary code via a crafted update status file, aka an "integer truncation" vulnerability. | 7.8 |
| 2019-10-23 | CVE-2019-18278 | Unspecified vulnerability in Videolan VLC Media Player 3.0.8 When executing VideoLAN VLC media player 3.0.8 with libqt on Windows, Data from a Faulting Address controls Code Flow starting at libqt_plugin!vlc_entry_license__3_0_0f+0x00000000003b9aba. | 7.8 |
| 2019-08-29 | CVE-2019-14970 | Out-of-bounds Write vulnerability in multiple products A vulnerability in mkv::event_thread_t in VideoLAN VLC media player 3.0.7.1 allows remote attackers to trigger a heap-based buffer overflow via a crafted .mkv file. | 7.8 |
| 2019-08-29 | CVE-2019-14778 | Use After Free vulnerability in multiple products The mkv::virtual_segment_c::seek method of demux/mkv/virtual_segment.cpp in VideoLAN VLC media player 3.0.7.1 has a use-after-free. | 7.8 |
| 2019-08-29 | CVE-2019-14777 | Use After Free vulnerability in multiple products The Control function of demux/mkv/mkv.cpp in VideoLAN VLC media player 3.0.7.1 has a use-after-free. | 7.8 |