description: Potential heap based buffer overflow in ParseJSS in VideoLAN VLC before 2.2.5 due to skipping NULL terminator in an input string allows attackers to execute arbitrary code via a crafted subtitles file.
problem types: Allows attacker to execute arbitrary code.
affected:
{
product: VLC
vendor: VideoLAN
versions:
status: affected, version: <2.2.5
}