A heap-based buffer over-read exists in DemuxInit() in demux/asf/asf.c in VideoLAN VLC media player 3.0.7.1 via a crafted .mkv file.
{ "binaries": [ { "binary_version": "2.2.2-5ubuntu0.16.04.5+esm4", "binary_name": "libvlc-dev" }, { "binary_version": "2.2.2-5ubuntu0.16.04.5+esm4", "binary_name": "libvlc5" }, { "binary_version": "2.2.2-5ubuntu0.16.04.5+esm4", "binary_name": "libvlccore-dev" }, { "binary_version": "2.2.2-5ubuntu0.16.04.5+esm4", "binary_name": "libvlccore8" }, { "binary_version": "2.2.2-5ubuntu0.16.04.5+esm4", "binary_name": "vlc" }, { "binary_version": "2.2.2-5ubuntu0.16.04.5+esm4", "binary_name": "vlc-data" }, { "binary_version": "2.2.2-5ubuntu0.16.04.5+esm4", "binary_name": "vlc-nox" }, { "binary_version": "2.2.2-5ubuntu0.16.04.5+esm4", "binary_name": "vlc-plugin-fluidsynth" }, { "binary_version": "2.2.2-5ubuntu0.16.04.5+esm4", "binary_name": "vlc-plugin-jack" }, { "binary_version": "2.2.2-5ubuntu0.16.04.5+esm4", "binary_name": "vlc-plugin-notify" }, { "binary_version": "2.2.2-5ubuntu0.16.04.5+esm4", "binary_name": "vlc-plugin-samba" }, { "binary_version": "2.2.2-5ubuntu0.16.04.5+esm4", "binary_name": "vlc-plugin-sdl" }, { "binary_version": "2.2.2-5ubuntu0.16.04.5+esm4", "binary_name": "vlc-plugin-svg" }, { "binary_version": "2.2.2-5ubuntu0.16.04.5+esm4", "binary_name": "vlc-plugin-zvbi" } ] }
{ "binaries": [ { "binary_version": "3.0.8-0ubuntu18.04.1", "binary_name": "libvlc-bin" }, { "binary_version": "3.0.8-0ubuntu18.04.1", "binary_name": "libvlc-dev" }, { "binary_version": "3.0.8-0ubuntu18.04.1", "binary_name": "libvlc5" }, { "binary_version": "3.0.8-0ubuntu18.04.1", "binary_name": "libvlccore-dev" }, { "binary_version": "3.0.8-0ubuntu18.04.1", "binary_name": "libvlccore9" }, { "binary_version": "3.0.8-0ubuntu18.04.1", "binary_name": "vlc" }, { "binary_version": "3.0.8-0ubuntu18.04.1", "binary_name": "vlc-bin" }, { "binary_version": "3.0.8-0ubuntu18.04.1", "binary_name": "vlc-data" }, { "binary_version": "3.0.8-0ubuntu18.04.1", "binary_name": "vlc-l10n" }, { "binary_version": "3.0.8-0ubuntu18.04.1", "binary_name": "vlc-plugin-access-extra" }, { "binary_version": "3.0.8-0ubuntu18.04.1", "binary_name": "vlc-plugin-base" }, { "binary_version": "3.0.8-0ubuntu18.04.1", "binary_name": "vlc-plugin-fluidsynth" }, { "binary_version": "3.0.8-0ubuntu18.04.1", "binary_name": "vlc-plugin-jack" }, { "binary_version": "3.0.8-0ubuntu18.04.1", "binary_name": "vlc-plugin-notify" }, { "binary_version": "3.0.8-0ubuntu18.04.1", "binary_name": "vlc-plugin-qt" }, { "binary_version": "3.0.8-0ubuntu18.04.1", "binary_name": "vlc-plugin-samba" }, { "binary_version": "3.0.8-0ubuntu18.04.1", "binary_name": "vlc-plugin-skins2" }, { "binary_version": "3.0.8-0ubuntu18.04.1", "binary_name": "vlc-plugin-svg" }, { "binary_version": "3.0.8-0ubuntu18.04.1", "binary_name": "vlc-plugin-video-output" }, { "binary_version": "3.0.8-0ubuntu18.04.1", "binary_name": "vlc-plugin-video-splitter" }, { "binary_version": "3.0.8-0ubuntu18.04.1", "binary_name": "vlc-plugin-visualization" }, { "binary_version": "3.0.8-0ubuntu18.04.1", "binary_name": "vlc-plugin-zvbi" } ], "availability": "No subscription required" }