Approved changes feed: RSS · Atom

cpe:2.3:a:videolan:vlc_media_player:3.0.7.1:*:*:*:*:*:*:*

part: a version: 3.0.7.1 update: *

VendorVideolan (b1ef3618-afd2-52df-be05-50fdbdda8d58)
ProductVlc Media Player (7235d722-37bb-5c15-baca-3fcb0f701e33)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:deb/debian/vlc purl2cpe 2026-06-01 10:16:43.492445
pkg:deb/ubuntu/vlc purl2cpe 2026-06-01 10:16:43.492447
pkg:github/videolan/vlc purl2cpe 2026-06-01 10:16:43.492449
pkg:rpm/opensuse/vlc purl2cpe 2026-06-01 10:16:43.492450
pkg:videolan/vlc purl2cpe 2026-06-01 10:16:43.492452

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2019-14970 vulnerable 2026-06-08 05:12:56.479409 Details available
A vulnerability in mkv::event_thread_t in VideoLAN VLC media player 3.0.7.1 allows remote attackers to trigger a heap-based buffer overflow via a crafted .mkv file.
Published: 2019-08-29T18:55:11.000Z
Updated: 2024-08-05T00:34:52.669Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-14778 vulnerable 2026-06-08 05:12:56.001398 Details available
The mkv::virtual_segment_c::seek method of demux/mkv/virtual_segment.cpp in VideoLAN VLC media player 3.0.7.1 has a use-after-free.
Published: 2019-08-29T18:47:41.000Z
Updated: 2024-08-05T00:26:38.642Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-14777 vulnerable 2026-06-08 05:12:56.000955 Details available
The Control function of demux/mkv/mkv.cpp in VideoLAN VLC media player 3.0.7.1 has a use-after-free.
Published: 2019-08-29T18:53:08.000Z
Updated: 2024-08-05T00:26:39.056Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-14776 vulnerable 2026-06-08 05:12:56.000398 Details available
A heap-based buffer over-read exists in DemuxInit() in demux/asf/asf.c in VideoLAN VLC media player 3.0.7.1 via a crafted .mkv file.
Published: 2019-08-29T18:45:48.000Z
Updated: 2024-08-05T00:26:38.930Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-14535 vulnerable 2026-06-08 05:12:54.949617 Details available
A divide-by-zero error exists in the SeekIndex function of demux/asf/asf.c in VideoLAN VLC media player 3.0.7.1. As a result, an FPE can be triggered via a crafted WMV file.
Published: 2019-08-29T17:38:30.000Z
Updated: 2024-08-05T00:19:41.378Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-14534 vulnerable 2026-06-08 05:12:54.948873 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-14533 vulnerable 2026-06-08 05:12:54.948308 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-14498 vulnerable 2026-06-08 05:12:54.919286 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-14438 vulnerable 2026-06-08 05:12:54.844193 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-14437 vulnerable 2026-06-08 05:12:54.843515 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.