CVE-2019-13615

MEDIUM5.5EPSS 0.31%

Published: 7/16/2019Modified: 11/19/2025

Also known as:ALPINE-CVE-2019-13615DEBIAN-CVE-2019-13615

Description

libebml before 1.3.6, as used in the MKV module in VideoLAN VLC Media Player binaries before 3.0.3, has a heap-based buffer over-read in EbmlElement::FindNextElement.

Affected packages (2)

Alpine/libebmlfrom 0, < 1.3.6-r0
Debian/libebmlfrom 0, < 1.3.6-1

CVSS scores

Source	Version	Severity	Vector
osv	CVSS 3.1	MEDIUM5.5	CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

References (2)

ADVISORYhttps://security.alpinelinux.org/vuln/CVE-2019-13615
ADVISORYhttps://security-tracker.debian.org/tracker/CVE-2019-13615