Patchwire CVEs, their patch status, and feeds to follow them

CVE-2014-9629

Fixed in a distro release EPSS 2%

Integer overflow in the Encode function in modules/codec/schroedinger.c in VideoLAN VLC media player before 2.1.6 and 2.2.x before 2.2.1 allows remote attackers to conduct buffer overflow attacks and execute arbitrary code via a crafted length value.

Published 2020-01-24 · CVE record · OSV

Products: videolan vlc_media_player

Distro releases

ReleasePackageFixed in
Debian 12vlc2.2.0~rc2-2
Debian 13vlc2.2.0~rc2-2
Debian 14vlc2.2.0~rc2-2
Debian 7vlc2.0.3-5+deb7u2
Ubuntu 14.04 LTSvlc2.1.6-0ubuntu14.04.1