CVE-2019-13602: An Integer Underflow in MP4_EIA608_Convert() in modules/demux/mp4/mp4.c in VideoLAN VLC media player throug...

Security readout for executives and security teams

This vulnerability affects VLC media player’s handling of crafted MP4 files. A malicious file could crash VLC and may have other unspecified impact. The public record does not provide CVSS scoring or evidence of active exploitation, so urgency depends on where VLC is installed and whether users handle untrusted media. Exposure is most likely on desktops, media workstations, kiosks, or servers where VLC processes MP4 files from email, web downloads, shared drives, customer submissions, or automated media workflows. Treat this as a practical workstation and media-processing risk, not an internet-scale emergency. Patch promptly where VLC handles untrusted media, especially in production media workflows or user groups likely to receive external files. Mitigation focus: Update VLC packages using VideoLAN or operating-system vendor guidance.; Prioritize systems that process untrusted or external MP4 files.; Restrict automated VLC processing of untrusted media until patched..

Prepared

Jun 6, 2026, 20:22 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.