Debian/vlc: high 7.8
The MP4_ReadBox_String function in modules/demux/mp4/libmp4.c in VideoLAN VLC media player before 2.1.6 performs an incorrect cast operation from a 64-bit integer to a 32-bit integer, which allows rem
Action: Upgrade vlc to 2.2.0~rc2-2 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 2.2.0~rc2-2 | - |
Fixed versions
| 2.2.0~rc2-2 |
Sources
published · modified · JSON