CVE-2018-19937

Published December 31st, 2018

View on NVD ↗

CVSS v3

6.6

MEDIUM

CVSS v2

4.6

MEDIUM

Affected

PROJECT

Description

A local, authenticated attacker can bypass the passcode in the VideoLAN VLC media player app before 3.1.5 for iOS by opening a URL and turning the phone.

videolan/vlc-ios

VLC for iOS/iPadOS and tvOS official mirror

GitHub

1.26K