{"action":"Upgrade vlc to 2.2.5-1 or later.","affected":[{"fixed":"2.2.5-1","introduced":"0"}],"component":"vlc","cve_ids":[],"ecosystem":"Debian","ecosystem_qualifier":"Debian:13","exploited":false,"fixed_versions":["2.2.5-1"],"id":"tcs_01M5NCP8KDM2RM7BMAKF9MXTFK","modified_at":"2026-09-01T20:03:50.940081033Z","published_at":"2017-05-23T21:29:00.307Z","references":["https://osv.dev/vulnerability/DEBIAN-CVE-2017-8313","https://security-tracker.debian.org/tracker/CVE-2017-8313"],"severity":{"label":"medium","score":5.5},"sources":[{"source":"osv","source_id":"DEBIAN-CVE-2017-8313#Debian:13/vlc","url":"https://osv.dev/vulnerability/DEBIAN-CVE-2017-8313"}],"summary":"Heap out-of-bound read in ParseJSS in VideoLAN VLC before 2.2.5 due to missing check of string termination allows attackers to read data beyond allocated memory and potentially crash the process via a"}