Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:31388
HistoryJul 28, 2021 - 2:23 a.m.

Arbitrary Code Execution

2021-07-2802:23:30
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
15
vlc vulnerability
arbitrary code execution
out-of-bounds read
avi file
security issue

EPSS

0.001

Percentile

31.9%

vlc is vulnerable to arbitrary code execution. An out-of-bounds read in the AVI_ExtractSubtitle component allows an attacker to execute arbitrary code on the host OS via a malicious .avi file.