CVE-2023-47360

Summary

Videolan VLC prior to version 3.0.20 contains an Integer underflow that leads to an incorrect packet length.

Affected Software

Weaknesses

• n/a

ADP Enrichment

CVE Program Container

Additional References

• https://0xariana.github.io/blog/real_bugs/vlc/mms
• https://lists.debian.org/debian-lts-announce/2023/11/msg00034.html

CISA ADP Vulnrichment

• SSVC:
• Exploitation: poc
  • Automatable: yes
  • Technical Impact: partial

References

• https://0xariana.github.io/blog/real_bugs/vlc/mms
• https://lists.debian.org/debian-lts-announce/2023/11/msg00034.html

• ←Previous
• Next→