CVE-2017-8313

Publication date

2017-05-23 21:00:00

Family

checkpoint

State

PUBLISHED

Description

Heap out-of-bound read in ParseJSS in VideoLAN VLC before 2.2.5 due to missing check of string termination allows attackers to read data beyond allocated memory and potentially crash the process via a crafted subtitles file.