CVE-2023-47360
HighSummary
Videolan VLC prior to version 3.0.20 contains an Integer underflow that leads to an incorrect packet length.
Risk Assessment
Exploitation of this vulnerability may lead to improper data processing, potentially resulting in application crashes or other unforeseen behaviors.
Recommendation
It is recommended to update VLC to version 3.0.20 or later to mitigate this vulnerability.
Other vulnerabilities in Videolan VLC
See all- CVE-2017-8311High
Potential heap based buffer overflow in ParseJSS in VideoLAN VLC before version 2.2.5 due to skipping NULL terminator in an input string allows attackers to execute arbitrary code via a crafted subtitles file.
- CVE-2023-47359Critical
Videolan VLC prior to version 3.0.20 contains an incorrect offset read that leads to a Heap-Based Buffer Overflow in function GetPacket() and results in memory corruption.
Original NVD description (English source)
Videolan VLC prior to version 3.0.20 contains an Integer underflow that leads to an incorrect packet length.