{"affected":[{"product":"n/a","source":"CNA: mitre","vendor":"n/a","versions":[{"status":"affected","version":"n/a"}]}],"cveId":"CVE-2019-14776","cwes":[],"description":"A heap-based buffer over-read exists in DemuxInit() in demux/asf/asf.c in VideoLAN VLC media player 3.0.7.1 via a crafted .mkv file.","epss":{"date":"2026-11-02","percentile":0.74873,"score":0.01537},"exploits":[],"kev":null,"metrics":[],"modifiedAt":1793641399063,"publishedAt":1567104348000,"references":[{"source":"CNA: mitre","tags":["x_refsource_CONFIRM"],"url":"http://git.videolan.org/?p=vlc.git&a=search&h=refs/heads/master&st=commit&s=cve-2019"},{"source":"CNA: mitre","tags":["vendor-advisory","x_refsource_DEBIAN"],"url":"https://www.debian.org/security/2019/dsa-4504"},{"source":"CNA: mitre","tags":["mailing-list","x_refsource_BUGTRAQ"],"url":"https://seclists.org/bugtraq/2019/Aug/36"},{"source":"CNA: mitre","tags":["x_refsource_CONFIRM"],"url":"https://www.videolan.org/security/sb-vlc308.html"},{"source":"CNA: mitre","tags":["vendor-advisory","x_refsource_GENTOO"],"url":"https://security.gentoo.org/glsa/201909-02"},{"source":"CNA: mitre","tags":["vendor-advisory","x_refsource_UBUNTU"],"url":"https://usn.ubuntu.com/4131-1/"},{"source":"CNA: mitre","tags":["vendor-advisory","x_refsource_SUSE"],"url":"http://lists.opensuse.org/opensuse-security-announce/2020-04/msg00036.html"},{"source":"CNA: mitre","tags":["vendor-advisory","x_refsource_SUSE"],"url":"http://lists.opensuse.org/opensuse-security-announce/2020-04/msg00046.html"},{"source":"ADP: CVE","tags":["x_refsource_CONFIRM","x_transferred"],"url":"http://git.videolan.org/?p=vlc.git&a=search&h=refs/heads/master&st=commit&s=cve-2019"},{"source":"ADP: CVE","tags":["vendor-advisory","x_refsource_DEBIAN","x_transferred"],"url":"https://www.debian.org/security/2019/dsa-4504"},{"source":"ADP: CVE","tags":["mailing-list","x_refsource_BUGTRAQ","x_transferred"],"url":"https://seclists.org/bugtraq/2019/Aug/36"},{"source":"ADP: CVE","tags":["x_refsource_CONFIRM","x_transferred"],"url":"https://www.videolan.org/security/sb-vlc308.html"},{"source":"ADP: CVE","tags":["vendor-advisory","x_refsource_GENTOO","x_transferred"],"url":"https://security.gentoo.org/glsa/201909-02"},{"source":"ADP: CVE","tags":["vendor-advisory","x_refsource_UBUNTU","x_transferred"],"url":"https://usn.ubuntu.com/4131-1/"},{"source":"ADP: CVE","tags":["vendor-advisory","x_refsource_SUSE","x_transferred"],"url":"http://lists.opensuse.org/opensuse-security-announce/2020-04/msg00036.html"},{"source":"ADP: CVE","tags":["vendor-advisory","x_refsource_SUSE","x_transferred"],"url":"http://lists.opensuse.org/opensuse-security-announce/2020-04/msg00046.html"}],"remediation":[],"revision":"d3c764266ea1cb534a94ab08f5e87e6cd953abff20379c6d77ac0121695b5709","sources":[{"modifiedAt":1793641399063,"name":"CNA: mitre","retrievedAt":1793642908675,"url":"https://www.cve.org/CVERecord?id=CVE-2019-14776"},{"modifiedAt":null,"name":"FIRST EPSS","retrievedAt":1793642914358,"url":"https://api.first.org/data/v1/epss?cve=CVE-2019-14776"}],"ssvc":{"assessedAt":1793641387358,"automatable":"no","exploitation":"none","source":"ADP: CISA-ADP","technicalImpact":"partial"},"status":"published","title":"CVE-2019-14776","updatedAt":1793642914358}