GHSA-h3gx-7f25-5jxg
GitHub Security Advisory
⚠ Unreviewed
HIGH
Has CVE
Advisory Details
Potential heap based buffer overflow in ParseJSS in VideoLAN VLC before 2.2.5 due to skipping NULL terminator in an input string allows attackers to execute arbitrary code via a crafted subtitles file.
Related CVEs
Key Information
7.5
/10
Dataset
Last updated: September 4, 2025 6:33 AM
Data from GitHub Advisory Database. This information is provided for research and educational purposes.