Paper/Archive/CVE-2018-19857

CVE-2018-19857

mitre — The CAF demuxer in modules/demux/caf.c in VideoLAN VLC media player 3.0.4 may read memory from an uninitialized pointer when processing m…

EPSS 4%CVSS 9.1

critical.is priorityof 100

CVSS 9.1 (NVD)9.1 / 10 × 3027.3 Not in CISA KEV+300.0 EPSS percentile 90.3.903 × 2018.1 No public exploit+100.0 SSVC exploitation: none+100.0

Description · from the CVE record

The CAF demuxer in modules/demux/caf.c in VideoLAN VLC media player 3.0.4 may read memory from an uninitialized pointer when processing magic cookies in CAF files, because a ReadKukiChunk() cast converts a return value to an unsigned int even if that value is negative. This could result in a denial of service and/or a potential infoleak.

Affected

ProductAffectedFixed inSource

n/an/a–CNA

Scores by source

NVD9.1CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H

CISA ADPSSVCExploitation: none · Automatable: no · Technical impact: partial

References

refsecurityfocus.com/bid/106130 refgit.videolan.org/?p=vlc.git%3Ba=commit%3Bh=0cc5ea748ee5ff7705dde61ab15dff8f58be39d0 refdyntopia.com/advisories/013-vlc advisorydebian.org/security/2019/dsa-4366 advisoryusn.ubuntu.com/4074-1 advisorylists.opensuse.org/opensuse-security-announce/2019-08/msg00005.html advisorylists.opensuse.org/opensuse-security-announce/2019-08/msg00040.html advisorylists.opensuse.org/opensuse-security-announce/2019-08/msg00037.html advisorylists.opensuse.org/opensuse-security-announce/2019-08/msg00081.html