{"affected":[{"product":"VLC Media Player","source":"CNA: hackerone","vendor":"n/a","versions":[{"status":"affected","version":"Fixed in 3.0.7"}]}],"cveId":"CVE-2019-5439","cwes":["CWE-120"],"description":"A Buffer Overflow in VLC Media Player < 3.0.7 causes a crash which can possibly be further developed into a remote code execution exploit.","epss":{"date":"2026-11-02","percentile":0.9258,"score":0.05295},"exploits":[],"kev":null,"metrics":[],"modifiedAt":1793641811742,"publishedAt":1560440316000,"references":[{"source":"CNA: hackerone","tags":["x_refsource_MISC"],"url":"https://hackerone.com/reports/484398"},{"source":"CNA: hackerone","tags":["vdb-entry","x_refsource_BID"],"url":"http://www.securityfocus.com/bid/108769"},{"source":"CNA: hackerone","tags":["vendor-advisory","x_refsource_UBUNTU"],"url":"https://usn.ubuntu.com/4074-1/"},{"source":"CNA: hackerone","tags":["vendor-advisory","x_refsource_SUSE"],"url":"http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00005.html"},{"source":"CNA: hackerone","tags":["vendor-advisory","x_refsource_SUSE"],"url":"http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00040.html"},{"source":"CNA: hackerone","tags":["vendor-advisory","x_refsource_SUSE"],"url":"http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00037.html"},{"source":"CNA: hackerone","tags":["vendor-advisory","x_refsource_GENTOO"],"url":"https://security.gentoo.org/glsa/201908-23"},{"source":"CNA: hackerone","tags":["vendor-advisory","x_refsource_SUSE"],"url":"http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00081.html"},{"source":"ADP: CVE","tags":["x_refsource_MISC","x_transferred"],"url":"https://hackerone.com/reports/484398"},{"source":"ADP: CVE","tags":["vdb-entry","x_refsource_BID","x_transferred"],"url":"http://www.securityfocus.com/bid/108769"},{"source":"ADP: CVE","tags":["vendor-advisory","x_refsource_UBUNTU","x_transferred"],"url":"https://usn.ubuntu.com/4074-1/"},{"source":"ADP: CVE","tags":["vendor-advisory","x_refsource_SUSE","x_transferred"],"url":"http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00005.html"},{"source":"ADP: CVE","tags":["vendor-advisory","x_refsource_SUSE","x_transferred"],"url":"http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00040.html"},{"source":"ADP: CVE","tags":["vendor-advisory","x_refsource_SUSE","x_transferred"],"url":"http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00037.html"},{"source":"ADP: CVE","tags":["vendor-advisory","x_refsource_GENTOO","x_transferred"],"url":"https://security.gentoo.org/glsa/201908-23"},{"source":"ADP: CVE","tags":["vendor-advisory","x_refsource_SUSE","x_transferred"],"url":"http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00081.html"}],"remediation":[],"revision":"814816a1d37ebddc4648c6843fb689e8fa2b42bd57ae2972b966d3780ef79707","sources":[{"modifiedAt":1793641811742,"name":"CNA: hackerone","retrievedAt":1793642911955,"url":"https://www.cve.org/CVERecord?id=CVE-2019-5439"},{"modifiedAt":null,"name":"FIRST EPSS","retrievedAt":1793642913348,"url":"https://api.first.org/data/v1/epss?cve=CVE-2019-5439"}],"ssvc":{"assessedAt":1793641797113,"automatable":"no","exploitation":"none","source":"ADP: CISA-ADP","technicalImpact":"partial"},"status":"published","title":"CVE-2019-5439","updatedAt":1793642913348}