60
CVE-2019-13615
PoC —CVSS 3.0
5.5 medium
EPSS
3%p84
Published
()
Modified
Description
libebml before 1.3.6, as used in the MKV module in VideoLAN VLC Media Player binaries before 3.0.3, has a heap-based buffer over-read in EbmlElement::FindNextElement.
- Vendors
- videolan
- Products
- vlc media player
- Weakness
- CWE-125
- Vector
- CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H