Launchpad.net

CVE 2017-8312

Heap out-of-bound read in ParseJSS in VideoLAN VLC due to missing check of string length allows attackers to read heap uninitialized data via a crafted subtitles file.

See the CVE page on Mitre.org for more details.