CVE-2016-3941

Fixed in a distro release EPSS 1%

Buffer overflow in the AStreamPeekStream function in input/stream.c in VideoLAN VLC media player before 2.2.0 allows remote attackers to cause a denial of service (crash) via a crafted wav file, related to "seek across EOF."

Published 2016-04-18 · CVE record · OSV

Products: videolan vlc_media_player, canonical ubuntu_linux

Distro releases