An off-by-one error in the DecodeBlock function in codec/sdl_image.c in VideoLAN VLC media player before 3.0.9 allows remote attackers to cause a denial of service (memory corruption) via a crafted image file. NOTE: this may be related to the SDL_Image product.
A product calculates or uses an incorrect maximum or minimum value that is 1 more, or 1 less, than the correct value.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Vlc_media_player | Videolan | * | 3.0.9 (excluding) |
| Vlc | Ubuntu | bionic | * |
| Vlc | Ubuntu | eoan | * |
| Vlc | Ubuntu | esm-apps/bionic | * |
| Vlc | Ubuntu | esm-apps/xenial | * |
| Vlc | Ubuntu | groovy | * |
| Vlc | Ubuntu | hirsute | * |
| Vlc | Ubuntu | impish | * |
| Vlc | Ubuntu | trusty | * |
| Vlc | Ubuntu | xenial | * |