description: Heap out-of-bound read in ParseJSS in VideoLAN VLC before 2.2.5 due to missing check of string termination allows attackers to read data beyond allocated memory and potentially crash the process via a crafted subtitles file.
problem types: Allows attacker to read data beyond allocated memory and potentially crash the process (causing a denial of service).
affected:
{
product: VLC
vendor: VideoLAN
versions:
status: affected, version: < 2.2.5
}