description: Heap out-of-bound read in ParseJSS in VideoLAN VLC due to missing check of string length allows attackers to read heap uninitialized data via a crafted subtitles file.
problem types: Allows attacker to read heap uninitialized data (potentially beyond allocated data - depends on heap implementation).
affected:
{
product: VLC
vendor: VideoLAN
versions:
status: affected, version: All
}