CVE-2017-10699
CriticalSummary
In avcodec 2.2.x, used in VideoLAN VLC media player 2.2.7-x before June 29, 2017, there is a flaw that allows out-of-bounds heap memory write. This is due to an incorrect size passed to memcpy(), leading to application crashes or potentially code execution.
Risk Assessment
Organizations may face application crashes, leading to service availability interruptions. There is also a risk of malicious code execution, which can have serious security implications.
Recommendation
It is recommended to update VLC media player to the latest version to mitigate this vulnerability. Additionally, monitor systems for unauthorized access or abnormal application behavior.
Original NVD description (English source)
avcodec 2.2.x, as used in VideoLAN VLC media player 2.2.7-x before 2017-06-29, allows out-of-bounds heap memory write due to calling memcpy() with a wrong size, leading to a denial of service (application crash) or possibly code execution.