---
id: CVE-2019-5439
title: >-
  A Buffer Overflow in VLC Media Player < 3.0.7 causes a crash which can
  possibly be further developed into a remote code execution exploit.
summary: >-
  A Buffer Overflow in VLC Media Player < 3.0.7 causes a crash which can
  possibly be further developed into a remote code execution exploit.
severity: none
cwe:
  - CWE-120
product: VLC Media Player
affected:
  - vlc_media_player Fixed in 3.0.7
ssvc:
  exploitation: none
  automatable: 'no'
  technicalImpact: partial
  timestamp: '2026-11-02T17:49:57.113247Z'
published: '2019-06-13'
updated: '2026-11-02'
sourceUpdated: '2026-11-02T17:50:11.742Z'
source: CVEORG
sourceUrl: 'https://www.cve.org/CVERecord?id=CVE-2019-5439'
references:
  - url: 'https://hackerone.com/reports/484398'
  - url: 'http://www.securityfocus.com/bid/108769'
    label: '108769'
  - url: 'https://usn.ubuntu.com/4074-1/'
    label: USN-4074-1
  - url: 'http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00005.html'
    label: 'openSUSE-SU-2019:1840'
  - url: 'http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00040.html'
    label: 'openSUSE-SU-2019:1909'
  - url: 'http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00037.html'
    label: 'openSUSE-SU-2019:1897'
  - url: 'https://security.gentoo.org/glsa/201908-23'
    label: GLSA-201908-23
  - url: 'http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00081.html'
    label: 'openSUSE-SU-2019:2015'
tags:
  - cve.org
epss: 0.05295
epssPercentile: 0.92615
ingestedAt: '2026-11-05T19:30:42.751Z'
---

## Overview

A Buffer Overflow in VLC Media Player < 3.0.7 causes a crash which can possibly be further developed into a remote code execution exploit.

## Affected

- `vlc_media_player Fixed in 3.0.7`

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.