VLC media player denial of service vulnerability

A vulnerability was identified in VLC media player, which can be exploited by malicious people to cause denial of service condition.

When parsing an invalid PNG image file, a buffer overflow might occur.

If successful, a malicious third party could trigger an invalid memory access, leading to a crash of the process of the VLC media player.

Because the overflow occurs while reading a buffer, rather than writing, it is believed that this issue cannot lead to arbitrary code execution.

Exploitation of this issue requires the user to explicitly open a specially crafted file.