CVE-2019-5459: Opensuse Backports

High severity, CVSS 7.1. EPSS: 2.8% chance of exploitation in the next 30 days.

An Integer underflow in VLC Media Player versions < 3.0.7 leads to an out-of-band read.

Affected products

• Opensuse Backports: version sle-15 only
• Opensuse Backports Sle: version 15.0 only
• Opensuse Leap: version 15.0 only; version 15.1 only
• Videolan Vlc Media Player: before 3.0.7 (fixed in 3.0.7)

Published 2019-07-30. Last modified 2026-10-08.