{"id":"CVE-2019-5459","title":"An Integer underflow in VLC Media Player versions < 3.0.7 leads to an out-of-band read.","summary":"An Integer underflow in VLC Media Player versions < 3.0.7 leads to an out-of-band read.","severity":"high","cvss":7.1,"cvssVector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H","cwe":["CWE-191","CWE-191"],"vendor":"videolan","product":"vlc_media_player","affected":["vlc_media_player < 3.0.7","backports_sle = 15.0","backports = sle-15","leap = 15.0","leap = 15.1"],"patched":["vlc_media_player 3.0.7"],"published":"2019-07-30","updated":"2026-10-08","sourceUpdated":"2026-10-08T22:16:55.170","source":"NVD","sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2019-5459","references":[{"url":"http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00005.html","label":"support@hackerone.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00037.html","label":"support@hackerone.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00040.html","label":"support@hackerone.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00081.html","label":"support@hackerone.com"},{"url":"https://hackerone.com/reports/502816","label":"support@hackerone.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00005.html","label":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00037.html","label":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00040.html","label":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00081.html","label":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://hackerone.com/reports/502816","label":"af854a3a-2127-422b-91ae-364da2661108"}],"tags":["nvd"],"epss":0.02812,"epssPercentile":0.8611,"ingestedAt":"2026-10-08T23:16:47.297Z","slug":"CVE-2019-5459","body":"## Overview\n\nAn Integer underflow in VLC Media Player versions < 3.0.7 leads to an out-of-band read.\n\n## Affected\n\n- `vlc_media_player < 3.0.7`\n- `backports_sle = 15.0`\n- `backports = sle-15`\n- `leap = 15.0`\n- `leap = 15.1`\n\n## Remediation\n\nUpgrade past the affected range:\n\n- `vlc_media_player 3.0.7`","depth":"twilight","depthScore":40,"depthScoreParts":{"impact":39.1,"likelihood":0.6,"exploitation":0,"ransomware":0},"changes":[]}