Bug 727580 (CVE-2020-13428)

Summary:	<media-video/vlc-3.0.11: Buffer overflow in hxxx_AnnexB_to_xVC via crafted H264 Annex B file (CVE-2020-13428)
Product:	Gentoo Security	Reporter:	Sam James <sam>
Component:	Vulnerabilities	Assignee:	Gentoo Security <security>
Status:	RESOLVED INVALID
Severity:	normal	CC:	media-video
Priority:	Normal	Keywords:	CC-ARCHES, PullRequest
Version:	unspecified	Flags:	nattka: sanity-check+
Hardware:	All
OS:	Linux
URL:	https://www.videolan.org/security/sb-vlc3011.html
See Also:	https://github.com/gentoo/gentoo/pull/16185
Whiteboard:	B3 [noglsa cve]
Package list:	=media-video/vlc-3.0.11	Runtime testing required:	---

Description Sam James archtester

2020-06-08 20:39:18 UTC

Description:
"A heap-based buffer overflow in the hxxx_AnnexB_to_xVC function in modules/packetizer/hxxx_nal.c in VideoLAN VLC media player through 3.2.8 for iOS, and through 3.0.10 for macOS, allows remote attackers to cause a denial of service (application crash) or execute arbitrary code via a crafted H.264 Annex-B video (.avi for example) file."

Patch: https://git.videolan.org/?p=vlc/vlc-3.0.git;a=commitdiff;h=d5c43c21c747ff30ed19fcca745dea3481c733e0;hp=441907f4352107737523bf9cfb56eabe3563edb4

Comment 1 Sam James archtester

2020-06-08 20:40:44 UTC

@maintainer(s), please bump to 3.0.11.

Comment 2 Sam James archtester

2020-06-16 02:23:50 UTC

@maintainer(s), please advise if ready for stabilisation, or call yourself

Comment 3 NATTkA bot gentoo-dev

2020-06-16 02:24:31 UTC

Unable to check for sanity:

> package masked: media-video/vlc-3.0.11, by keywords: -sparc

Comment 4 NATTkA bot gentoo-dev

2020-06-16 03:44:39 UTC

All sanity-check issues have been resolved

Comment 5 Sam James archtester

2020-06-18 22:01:44 UTC

arm64 stable

Comment 6 Sam James archtester

2020-06-18 23:44:57 UTC

This doesn't affect us: https://www.videolan.org/security/sb-vlc3011.html

"The affected code was only used by macOS/iOS hardware accelerated decoder (VideoToolbox), meaning other platforms are unaffected."