Skip to content
OpenAdvisories
Unscored DSA-4459-1 4 CVEs

vlc - security update

Published Jun 12, 2019 · Updated Mar 9, 2026

Ecosystem: Debian

Fixed packages 1

ReleasePackageFixed in
Debian · 9 vlc 3.0.7-0+deb9u1

Vulnerabilities 4

  • Unscored —
    CVE-2019-12874

    An issue was discovered in zlib_decompress_extra in modules/demux/mkv/util.cpp in VideoLAN VLC media player 3.x through…

    vlc vlc Debian Ubuntu
  • Unscored —
    CVE-2019-5439

    A Buffer Overflow in VLC Media Player < 3.0.7 causes a crash which can possibly be further developed into a remote code…

    vlc vlc Debian Ubuntu
  • Unscored —
    CVE-2019-5459

    An Integer underflow in VLC Media Player versions < 3.0.7 leads to an out-of-band read.

    vlc faad2 Debian Ubuntu
  • Unscored —
    CVE-2019-5460

    Double Free in VLC versions <= 3.0.6 leads to a crash.

    vlc Debian