CVE-2019-5459

An Integer underflow in VLC Media Player versions < 3.0.7 leads to an out-of-band read.

Score

CVSS 3.1 7.1 High

Status

Modified - support@hackerone.com

Published

2019-07-30

Last modified

2026-10-08

Weaknesses

CWE-191

Affected products

• Backports (Opensuse)
• Backports Sle (Opensuse)
• Leap (Opensuse)
• Vlc Media Player (Videolan)

References

• https://hackerone.com/reports/502816
• http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00005.html
• http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00040.html
• http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00037.html
• http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00081.html