VideoLAN VLC Buffer Overflow Vulnerability

VideoLAN VLC is an open source cross-platform multimedia player and framework for playing most multimedia files, as well as DVDs, audio CDs, VCDs and various streaming protocols. vlc_input_attachment_New component in VideoLAN VLC version 3.0.11 is vulnerable to buffer overflow, which can be exploited by attackers via specially crafted . avi file to cause an out-of-bounds read.