High severity7.8NVD Advisory· Published May 15, 2020· Updated Jun 17, 2026

CVE-2019-19721

Description

An off-by-one error in the DecodeBlock function in codec/sdl_image.c in VideoLAN VLC media player before 3.0.9 allows remote attackers to cause a denial of service (memory corruption) via a crafted image file. NOTE: this may be related to the SDL_Image product.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

VideoLAN/VLC media playerdescription
VideoLAN/VLC media playerllm-fuzzy
Range: <3.0.9

Patches

Vulnerability mechanics

References

bugs.gentoo.org/721940nvdExploitPatchThird Party Advisory
hg.libsdl.org/SDL_image/nvdRelease NotesThird Party Advisory
www.videolan.org/security/nvdVendor Advisory
git.videolan.orgnvd

News mentions

ABB Ability Camera Connect
CISA ICS Advisories

cvss	0.507
epss	0.002
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000