Lucene search

K
osvGoogleOSV:CVE-2020-13428
HistoryJun 08, 2020 - 7:15 p.m.

CVE-2020-13428

2020-06-0819:15:10
Google
osv.dev
8

8.1 High

AI Score

Confidence

High

0.006 Low

EPSS

Percentile

78.6%

A heap-based buffer overflow in the hxxx_AnnexB_to_xVC function in modules/packetizer/hxxx_nal.c in VideoLAN VLC media player before 3.0.11 for macOS/iOS allows remote attackers to cause a denial of service (application crash) or execute arbitrary code via a crafted H.264 Annex-B video (.avi for example) file.