תיאור (מקור, אנגלית)
An off-by-one error in the DecodeBlock function in codec/sdl_image.c in VideoLAN VLC media player before 3.0.9 allows remote attackers to cause a denial of service (memory corruption) via a crafted image file. NOTE: this may be related to the SDL_Image product.
מוצרים מושפעים
videolan: vlc media player
קישורים8
- www.videolan.org/security/ Vendor Advisory
- www.videolan.org/security/ Vendor Advisory
- bugs.gentoo.org/721940 ExploitPatchThird Party Advisory
- bugs.gentoo.org/721940 ExploitPatchThird Party Advisory
- hg.libsdl.org/SDL_image/ Release NotesThird Party Advisory
- git.videolan.org/?p=vlc/vlc-3.0.git%3Ba=commit%3Bh=72afe7ebd83…
- hg.libsdl.org/SDL_image/ Release NotesThird Party Advisory
- git.videolan.org/?p=vlc/vlc-3.0.git%3Ba=commit%3Bh=72afe7ebd83…
מדדים
- CVSS 3.1
-
7.8
HIGH
מקור הציון: NVD
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H - EPSS — סבירות ניצול
- 2% אחוזון 81 · נכון ל-2 בנובמבר 2026
- CWE
- CWE-193CWE-787