Improper input validation in VLC Media Player - CVE-2018-19857
Published: December 7, 2018 / Updated: December 7, 2018
Vulnerability identifier: #VU16333
CSH Severity: Low
CVSS v4: 6.7 [CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N]
CVE-ID: CVE-2018-19857
CWE-ID: CWE-20
Exploitation vector: Remote access
Exploit availability:
No public exploit available
Vulnerability details
The vulnerability allows a remote attacker to cause DoS condition on the target system.
The vulnerability exists due to improper handling of magic cookies in Core Audio Format (CAF) files, which could result in an uninitialized memory read in the CAF demuxer. A remote attacker can trick the victim into accessing a CAF file that submits malicious input, trigger typecast that converts a possibly negative return value to an unsigned integer in the ReadKukiChunk() function and cause the service to crash.
Affected software
VLC Media Player
vlc (Debian package)
Opensuse
SUSE Linux
vlc (Debian package)
Opensuse
SUSE Linux
How to mitigate CVE-2018-19857
Install update from vendor's website.
vlc (Debian package) - update to 3.0.6-0+deb9u1