Security Advisory
CVE-2017-8312
CVE vulnerability detail - eXtreme Datacenter Security Operations
Description
Heap out-of-bound read in ParseJSS in VideoLAN VLC due to missing check of string length allows attackers to read heap uninitialized data via a crafted subtitles file.