{"id":"CVE-2019-19721","revision":"01c2e0f41b5b488e8af3917a3c555513","records":[{"revision":"01c2e0f41b5b488e8af3917a3c555513","observedAt":"2026-10-23T15:48:27.903+00:00","statement":{"source":"cve-program","id":"CVE-2019-19721","aliases":[],"title":"An off-by-one error in the DecodeBlock function in codec/sdl_image.c in VideoLAN VLC media player before 3.0.9 allows remote attackers to cause a denial of service (memory corruption) via a crafted image file. NOTE: this may be related to t…","description":"An off-by-one error in the DecodeBlock function in codec/sdl_image.c in VideoLAN VLC media player before 3.0.9 allows remote attackers to cause a denial of service (memory corruption) via a crafted image file. NOTE: this may be related to the SDL_Image product.","state":0,"publishedAt":"2020-05-15T17:28:23+00:00","modifiedAt":"2026-10-08T21:13:50.379+00:00","affected":[{"ecosystem":"Vendor product","name":"n/a","ranges":[],"versions":[],"rawVersionEvidence":"{\n                    \"product\": \"n/a\",\n                    \"vendor\": \"n/a\",\n                    \"versions\": [\n                        {\n                            \"status\": \"affected\",\n                            \"version\": \"n/a\"\n                        }\n                    ]\n                }"}],"metrics":[],"references":["https://www.videolan.org/security/","http://hg.libsdl.org/SDL_image/","https://bugs.gentoo.org/721940","https://git.videolan.org/?p=vlc/vlc-3.0.git%3Ba=commit%3Bh=72afe7ebd8305bf4f5360293b8621cde52ec506b"],"sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2019-19721","license":"CVE Program Terms of Use","key":"cve-program:CVE-2019-19721","identifiers":["CVE-2019-19721"]},"retained":false,"historicalAffected":[]}],"coverage":[]}