{"id":"CVE-2019-5439","title":"A Buffer Overflow in VLC Media Player < 3.0.7 causes a crash which can possibly be further developed into a remote code execution exploit.","summary":"A Buffer Overflow in VLC Media Player < 3.0.7 causes a crash which can possibly be further developed into a remote code execution exploit.","severity":"none","cwe":["CWE-120"],"product":"VLC Media Player","affected":["vlc_media_player Fixed in 3.0.7"],"ssvc":{"exploitation":"none","automatable":"no","technicalImpact":"partial","timestamp":"2026-11-02T17:49:57.113247Z"},"published":"2019-06-13","updated":"2026-11-02","sourceUpdated":"2026-11-02T17:50:11.742Z","source":"CVEORG","sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2019-5439","references":[{"url":"https://hackerone.com/reports/484398"},{"url":"http://www.securityfocus.com/bid/108769","label":"108769"},{"url":"https://usn.ubuntu.com/4074-1/","label":"USN-4074-1"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00005.html","label":"openSUSE-SU-2019:1840"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00040.html","label":"openSUSE-SU-2019:1909"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00037.html","label":"openSUSE-SU-2019:1897"},{"url":"https://security.gentoo.org/glsa/201908-23","label":"GLSA-201908-23"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00081.html","label":"openSUSE-SU-2019:2015"}],"tags":["cve.org"],"epss":0.05295,"epssPercentile":0.92615,"ingestedAt":"2026-11-05T19:30:42.751Z","slug":"CVE-2019-5439","body":"## Overview\n\nA Buffer Overflow in VLC Media Player < 3.0.7 causes a crash which can possibly be further developed into a remote code execution exploit.\n\n## Affected\n\n- `vlc_media_player Fixed in 3.0.7`\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.","depth":"sunlit","depthScore":4,"depthScoreParts":{"impact":2.8,"likelihood":1.1,"exploitation":0,"ransomware":0},"changes":[]}