KLA10824
Denial of service and arbitrary code execution vulnerabilities in VideoLAN VLC media player

An unknown vulnerability was found in VLC media player. By exploiting this vulnerability malicious users can cause a denial of service or execute arbitrary code. This vulnerability can be exploited remotely via specially crafted QuickTime IMA file.

Technical details

This vulnerability related to DecodeAdpcmImaQT function in modules/codec/adpcm.c.

VideoLAN VLC media player earlier than 2.2.4

Update to the latest version
Get VLC media player