# vlc-plugin-visualization 3.0.8-0ubuntu18.04.1: vlc-plugin-visualization 3.0.8-0ubuntu18.04.1 for Ubuntu 18.04.6 LTS (bionic)

vlc-plugin-visualization 3.0.8-0ubuntu18.04.1, released August 28, 2019, fixes 11 CVEs in vlc-plugin-visualization. None of them is reported as exploited. Patch Radar priority: Routine. The product is no longer supported.

- Web page: https://patchblox.com/security/fix/linux/ubuntu-bionic-vlc-plugin-visualization-3.0.8-0ubuntu18.04.1
- Platform: Linux
- Released: Aug 28, 2019
- Priority: Routine (Closes 11 CVEs, none high severity)
- CVEs: 11, exploited: 0, on CISA KEV: 0

## Applies to

| Product | Release | Fixed in |
|---|---|---|
| [vlc-plugin-visualization](https://patchblox.com/security/data/product/linux/vlc-plugin-visualization.md) | Ubuntu 18.04.6 LTS (bionic) | 3.0.8-0ubuntu18.04.1 |

## CVEs this fix closes

| CVE | Priority | Title | CVSS | EPSS | Exploitation |
|---|---|---|---:|---:|---|
| [CVE-2019-13962](https://patchblox.com/security/data/cve/CVE-2019-13962.md) | Routine | vlc-data: lavc_CopyPicture in modules/codec/avcodec/video.c in VideoLAN VLC media player through 3.0.7 has a heap-based buffer... | n/a | 0.0367 |  |
| [CVE-2019-14970](https://patchblox.com/security/data/cve/CVE-2019-14970.md) | Routine | vlc-l10n: A vulnerability in mkv::event_thread_t in VideoLAN VLC media player 3.0.7.1 allows remote attackers to trigger a heap... | n/a | 0.0194 |  |
| [CVE-2019-14438](https://patchblox.com/security/data/cve/CVE-2019-14438.md) | Routine | libvlc5: A heap-based buffer over-read in xiph_PackHeaders() in modules/demux/xiph.h in VideoLAN VLC media player 3.0.7.1 allo... | n/a | 0.0182 |  |
| [CVE-2019-14535](https://patchblox.com/security/data/cve/CVE-2019-14535.md) | Routine | libvlc5: A divide-by-zero error exists in the SeekIndex function of demux/asf/asf.c in VideoLAN VLC media player 3.0.7.1 | n/a | 0.0154 |  |
| [CVE-2019-14776](https://patchblox.com/security/data/cve/CVE-2019-14776.md) | Routine | libvlc5: A heap-based buffer over-read exists in DemuxInit() in demux/asf/asf.c in VideoLAN VLC media player 3.0.7.1 via a cra... | n/a | 0.0154 |  |
| [CVE-2019-14498](https://patchblox.com/security/data/cve/CVE-2019-14498.md) | Routine | libvlc5: A divide-by-zero error exists in the Control function of demux/caf.c in VideoLAN VLC media player 3.0.7.1 | n/a | 0.0152 |  |
| [CVE-2019-14437](https://patchblox.com/security/data/cve/CVE-2019-14437.md) | Routine | libvlc5: The xiph_SplitHeaders function in modules/demux/xiph.h in VideoLAN VLC media player 3.0.7.1 does not check array boun... | n/a | 0.0150 |  |
| [CVE-2019-14533](https://patchblox.com/security/data/cve/CVE-2019-14533.md) | Routine | vlc-plugin-video-splitter: The Control function of demux/asf/asf.c in VideoLAN VLC media player 3.0.7.1 has a use-after-free. | n/a | 0.0146 |  |
| [CVE-2019-14777](https://patchblox.com/security/data/cve/CVE-2019-14777.md) | Routine | vlc: The Control function of demux/mkv/mkv.cpp in VideoLAN VLC media player 3.0.7.1 has a use-after-free. | n/a | 0.0146 |  |
| [CVE-2019-14778](https://patchblox.com/security/data/cve/CVE-2019-14778.md) | Routine | vlc-plugin-video-output: The mkv::virtual_segment_c::seek method of demux/mkv/virtual_segment.cpp in VideoLAN VLC media player 3.0.7.1 has a u... | n/a | 0.0146 |  |
| [CVE-2019-14534](https://patchblox.com/security/data/cve/CVE-2019-14534.md) | Routine | libvlc5: In VideoLAN VLC media player 3.0.7.1, there is a NULL pointer dereference at the function SeekPercent of demux/asf/as... | n/a | 0.0140 |  |

---

Data as of 2026-11-11T13:47:35Z UTC. Source: Patchblox Patch Radar (https://patchblox.com/security/patch-radar). Patchblox finds out-of-date software on Windows, macOS and Linux and updates it through release rings: https://patchblox.com/demo

Free to use with attribution: show "Data: Patchblox Patch Radar" with a link to https://patchblox.com/security/patch-radar. Terms, including what needs a written agreement: https://patchblox.com/security/patch-radar/use-the-data

Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.