High severity7.8NVD Advisory· Published Jan 24, 2020· Updated Jun 17, 2026
CVE-2014-9630
CVE-2014-9630
Description
The rtp_packetize_xiph_config function in modules/stream_out/rtpfmt.c in VideoLAN VLC media player before 2.1.6 uses a stack-allocation approach with a size determined by arbitrary input data, which allows remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via a crafted length value.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
4cpe:2.3:a:videolan:vlc_media_player:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:videolan:vlc_media_player:*:*:*:*:*:*:*:*range: <2.1.6
- (no CPE)range: <2.1.6
- VideoLAN/VLC media playerdescription
Patches
Vulnerability mechanics
References
3- openwall.com/lists/oss-security/2015/01/20/5nvdMailing ListPatchThird Party Advisory
- github.com/videolan/vlc/commit/204291467724867b79735c0ee3aeb0dbc2200f97nvdPatchThird Party Advisory
- www.videolan.org/security/sa1501.htmlnvdVendor Advisory
News mentions
0No linked articles in our index yet.