CVE-2020-26664
Summary
| CVE | CVE-2020-26664 |
|---|
| State | PUBLIC |
|---|
| Assigner | [email protected] |
|---|
| Source Priority | CVE Program / NVD first with legacy fallback |
|---|
| Published | 2021-01-08 18:15:00 UTC |
|---|
| Updated | 2023-02-03 18:49:00 UTC |
|---|
| Description | A vulnerability in EbmlTypeDispatcher::send in VideoLAN VLC media player 3.0.11 allows attackers to trigger a heap-based buffer overflow via a crafted .mkv file. |
|---|
NVD Known Affected Configurations (CPE 2.3)
References
| Reference | Source | Link | Tags |
|---|
| [SECURITY] [DLA 3050-1] vlc security update |
MLIST |
lists.debian.org |
|
| VLC: Buffer overflow (GLSA 202101-37) — Gentoo security |
GENTOO |
security.gentoo.org |
Third Party Advisory |
| Debian -- Security Information -- DSA-4834-1 vlc |
DEBIAN |
www.debian.org |
Third Party Advisory |
| videolan.com |
MISC |
videolan.com |
Product, Vendor Advisory |
| DSI Architects, Inc. |
MISC |
vlc.com |
Third Party Advisory |
| gist.githubusercontent.com/henices/db11664dd45b9f322f8514d182aef5ea/raw/d56940c8bf211992... |
MISC |
gist.githubusercontent.com |
Exploit, Third Party Advisory |
| CVE Program record |
CVE.ORG |
www.cve.org |
canonical |
| NVD vulnerability detail |
NVD |
nvd.nist.gov |
canonical, analysis |
No vendor comments have been submitted for this CVE.
Legacy QID Mappings
- 179369 Debian Security Update for vlc (DLA 3050-1)
- 501268 Alpine Linux Security Update for vlc
- 750223 OpenSUSE Security Update for vlc (openSUSE-SU-2021:0691-1)
- 750419 OpenSUSE Security Update for vlc (openSUSE-SU-2021:0091-1)
- 750425 OpenSUSE Security Update for vlc (openSUSE-SU-2021:0076-1)
