CVE-2016-5108

Critical

Published: 08/06/2016(UTC)Translated: 14/06/2026(UTC)NVD NIST

Summary

Buffer overflow in the DecodeAdpcmImaQT function in VideoLAN VLC media player before version 2.2.4 allows remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via a crafted QuickTime IMA file.

Risk Assessment

An attacker could exploit this vulnerability to remotely crash the application or execute malicious code, posing a significant security risk to the system.

Recommendation

It is recommended to update VLC media player to version 2.2.4 or later to mitigate this vulnerability.

Original NVD description (English source)

Buffer overflow in the DecodeAdpcmImaQT function in modules/codec/adpcm.c in VideoLAN VLC media player before 2.2.4 allows remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via a crafted QuickTime IMA file.