CVE-2019-12874

An issue was discovered in zlibdecompressextra in modules/demux/mkv/util.cpp in VideoLAN VLC media player 3.x through 3.0.7. The Matroska demuxer, while parsing a malformed MKV file type, has a double free.

References

Affected packages

Git / github.com/videolan/vlc-3.0

Affected ranges

Type

GIT

Repo

https://github.com/videolan/vlc-3.0

Events

Introduced

8d432b090e08f141ce9156dc728afbed4636301b

Last affected

86cee310996569c2ee419a457107141ac472536b

Database specific

{
    "versions": [
        {
            "introduced": "3.0.0"
        },
        {
            "last_affected": "3.0.7"
        }
    ]
}

Affected versions

3.*

3.0.0

3.0.0-1

3.0.0-2

3.0.0-git

3.0.0-rc1

3.0.0-rc2

3.0.0-rc3

3.0.0-rc4

3.0.0-rc5

3.0.0-rc6

3.0.0-rc7

3.0.0-rc8

3.0.0.1

3.0.1

3.0.2

3.0.3

3.0.3-1

3.0.4

3.0.5

3.0.5-1

3.0.5-2

3.0.6

3.0.7

Database specific

source

"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2019-12874.json"