Felipe Manzano

Researcher fromCore Security Technologies

#16871of 60,450

18.6Total CVSS

Vulnerabilities · 2

High

2

Vlc Media Player

The issue allows remote attackers to overwrite arbitrary memory and execute arbitrary code via a malformed MP4 file. This is related to the MP4 demuxer (mp4.c) in VLC media player when used in Miro Player.

The issue is related to an array index error in the libmpdemux/demux mov.c file, which could potentially allow remote attackers to execute arbitrary code. This is possible through a crafted QuickTime MOV file that contains a specifically designed stsc atom tag.