vulnerability

FreeBSD: VID-f2144530-936f-11e9-8fc4-5404a68ad561 (CVE-2019-5439): vlc -- Buffer overflow vulnerability

Severity
4
CVSS
(AV:N/AC:M/Au:N/C:N/I:N/A:P)
Published
Jun 20, 2019
Added
Jun 21, 2019
Modified
Dec 10, 2025

Description

zhangyang reports: The ReadFrame function in the avi.c file uses a variable i_width_bytes, which is obtained directly from the file. It is a signed integer. It does not do a strict check before the memory operation(memmove, memcpy), which may cause a buffer overflow.

Solution

freebsd-upgrade-package-vlc
Title
NEW

Explore Exposure Command

Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.