CVE-2014-9625 | BDVDB-2026-129646 Detail

Description#

The GetUpdateFile function in misc/update.c in the Updater in VideoLAN VLC media player before 2.1.6 performs an incorrect cast operation from a 64-bit integer to a 32-bit integer, which allows remote attackers to conduct buffer overflow attacks and execute arbitrary code via a crafted update status file, aka an "integer truncation" vulnerability.

Impact#

Weaknesses#

References#

Exploit#

History#

1. Version 12020-01-24Record published in the CVE List.
2. Version 22024-08-06Most recent update recorded in the CVE List.