An issue was discovered in zlib_decompress_extra in modules/demux/mkv/util.cpp in VideoLAN VLC media player 3.x through 3.0.7. The Matroska demuxer, while parsing a malformed MKV file type, has a double free.
The product calls free() twice on the same memory address, potentially leading to modification of unexpected memory locations.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Vlc_media_player | Videolan | 3.0.0 (including) | 3.0.7 (including) |
| Vlc | Ubuntu | bionic | * |
| Vlc | Ubuntu | cosmic | * |
| Vlc | Ubuntu | disco | * |
| Vlc | Ubuntu | esm-apps/xenial | * |
| Vlc | Ubuntu | trusty | * |
| Vlc | Ubuntu | upstream | * |
| Vlc | Ubuntu | xenial | * |