description: Heap out-of-bound read in CreateHtmlSubtitle in VideoLAN VLC 2.2.x due to missing check of string termination allows attackers to read data beyond allocated memory and potentially crash the process (causing a denial of service) via a crafted subtitles file.
problem types: Allows attacker to read data beyond allocated memory and potentially crash the process (causing a denial of service)
affected:
{
product: VLC
vendor: VideoLAN
versions:
status: affected, version: 2.2.*
}