Security Advisory

CVE-2014-9627

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2020-01-24 21:57:23

Last updated 2024-08-06 13:47:41

Assigner mitre

CVSS score not scored

State PUBLISHED

Description

The MP4_ReadBox_String function in modules/demux/mp4/libmp4.c in VideoLAN VLC media player before 2.1.6 performs an incorrect cast operation from a 64-bit integer to a 32-bit integer, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via a large box size.

← Browse all CVEs View on cve.org ↗