VideoLAN VLC Media Player 3.0.7.1
Approved changes feed: RSS · Atom
cpe:2.3:a:videolan:vlc_media_player:3.0.7.1:*:*:*:*:*:*:*part: a version: 3.0.7.1 update: *
| Vendor | Videolan (b1ef3618-afd2-52df-be05-50fdbdda8d58) |
|---|---|
| Product | Vlc Media Player (7235d722-37bb-5c15-baca-3fcb0f701e33) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from NVD CPE 2.0 feed
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:deb/debian/vlc |
purl2cpe | 2026-06-01 10:16:43.492445 |
pkg:deb/ubuntu/vlc |
purl2cpe | 2026-06-01 10:16:43.492447 |
pkg:github/videolan/vlc |
purl2cpe | 2026-06-01 10:16:43.492449 |
pkg:rpm/opensuse/vlc |
purl2cpe | 2026-06-01 10:16:43.492450 |
pkg:videolan/vlc |
purl2cpe | 2026-06-01 10:16:43.492452 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2019-14970 |
vulnerable | 2026-06-08 05:12:56.479409 |
Details available
A vulnerability in mkv::event_thread_t in VideoLAN VLC media player 3.0.7.1 allows remote attackers to trigger a heap-based buffer overflow via a crafted .mkv file.
Published: 2019-08-29T18:55:11.000Z
Updated: 2026-11-02T17:44:48.455Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-14778 |
vulnerable | 2026-06-08 05:12:56.001398 |
Details available
The mkv::virtual_segment_c::seek method of demux/mkv/virtual_segment.cpp in VideoLAN VLC media player 3.0.7.1 has a use-after-free.
Published: 2019-08-29T18:47:41.000Z
Updated: 2026-11-02T17:44:14.483Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-14777 |
vulnerable | 2026-06-08 05:12:56.000955 |
Details available
The Control function of demux/mkv/mkv.cpp in VideoLAN VLC media player 3.0.7.1 has a use-after-free.
Published: 2019-08-29T18:53:08.000Z
Updated: 2026-11-02T17:43:46.719Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-14776 |
vulnerable | 2026-06-08 05:12:56.000398 |
Details available
A heap-based buffer over-read exists in DemuxInit() in demux/asf/asf.c in VideoLAN VLC media player 3.0.7.1 via a crafted .mkv file.
Published: 2019-08-29T18:45:48.000Z
Updated: 2026-11-02T17:43:19.063Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-14535 |
vulnerable | 2026-06-08 05:12:54.949617 |
Details available
A divide-by-zero error exists in the SeekIndex function of demux/asf/asf.c in VideoLAN VLC media player 3.0.7.1. As a result, an FPE can be triggered via a crafted WMV file.
Published: 2019-08-29T17:38:30.000Z
Updated: 2026-11-02T17:42:48.098Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-14534 |
vulnerable | 2026-06-08 05:12:54.948873 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-14533 |
vulnerable | 2026-06-08 05:12:54.948308 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-14498 |
vulnerable | 2026-06-08 05:12:54.919286 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-14438 |
vulnerable | 2026-06-08 05:12:54.844193 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-14437 |
vulnerable | 2026-06-08 05:12:54.843515 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.