VLC Media Player SWF Video Decoding Use-After-Free Vulnerability

A vulnerability has been identified in VLC Media Player, which can be exploited by malicious people to potentially compromise a user's system.

The vulnerability is caused due to a use-after-free error when releasing a picture object during video decoding of Flash (SWF) files. This can be exploited to reference an object's callback function pointer from already freed memory.

Successful exploitation may allow execution of arbitrary code.

Note: Vendor patch is currently unavailable.