| Package | Affected versions | Patched versions |
|---|---|---|
| vlc media player | ≤ 2.2.8 |
In VideoLAN VLC media player through 2.2.8, there is a type conversion vulnerability in modules/demux/mp4/libmp4.c in the MP4 demux module leading to a invalid free, because the type of a box may be changed between a read operation and a free operation.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free