Security Advisory

CVE-2017-17670

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2017-12-15 09:00:00
Last updated 2024-08-05 20:59:17
Assigner mitre
CVSS score not scored
State PUBLISHED

Description

In VideoLAN VLC media player through 2.2.8, there is a type conversion vulnerability in modules/demux/mp4/libmp4.c in the MP4 demux module leading to a invalid free, because the type of a box may be changed between a read operation and a free operation.