The vulnerability of the CAF demultiplexer in the VideoLAN VLC media player lies in the access to an uninitialized pointer, which allows a hacker to trigger a service failure and/or gain access to confidential data.

The vulnerability of the CAF media player VideoLAN VLC lies in the access to an uninitialized pointer due to a numerical overflow during the processing of cookie files in the ReadKukiChunk function. Exploiting this vulnerability allows a remote attacker to cause service failures and/or gain acces...

PT-2018-2644

Name of the Vulnerable Software and Affected Versions VideoLAN VLC media player version 3.0.4 Description The issue is related to the CAF demuxer in the VideoLAN VLC media player. It may read memory from an uninitialized pointer when processing magic cookies in CAF files. This could result in a...