Out-of-bounds read in VLC Media Player - CVE-2019-13615

Vulnerability identifier: #VU19986

CSH Severity: Low

CVSS v4: 4.6 [CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N]

CVE-ID: CVE-2019-13615

CWE-ID: CWE-125

Exploitation vector: Remote access

Exploit availability: No public exploit available

The vulnerability allows a remote attacker to perform a denial of service (DoS) attack.

The vulnerability exists due to heap-based buffer over-read in EbmlElement::FindNextElement. A remote attacker can perform a denial of service attack.

VLC Media Player
libebml (Alpine package)
libebml
libmatroska
mkvtoolnix
Fedora

Install update from vendor's website.

VLC Media Player - update to 3.0.3
libebml (Alpine package) - update to 1.3.5-r1
libebml - update to 1.3.9-1.el7
libmatroska - update to 1.5.2-1.el7
mkvtoolnix - update to 37.0.0-1.el7

• http://www.securityfocus.com/bid/109304
• https://github.com/Matroska-Org/libebml/commit/05beb69ba60acce09f73ed491bb76f332849c3a0
• https://github.com/Matroska-Org/libebml/commit/b66ca475be967547af9a3784e720fbbacd381be6
• https://github.com/Matroska-Org/libebml/compare/release-1.3.5...release-1.3.6
• https://trac.videolan.org/vlc/ticket/22474
• https://usn.ubuntu.com/4073-1/

• Denial of service in VideoLAN VLC Media Player
• Out-of-bounds read in libebml (Alpine package)
• Fedora EPEL 7 update for libebml, libmatroska, mkvtoolnix