VDB
GCVE-110-MAGEIA-2016-221
GCVE-110-MAGEIA-2016-221
Advisory Published
A vulnerability was found in processing QuickTime IMA files. VLC does not
check that the number of channels in the input stream is less than or
equal to the size of the buffer, resulting in an out-of-bounds write
potential for remote code execution via a malicious media file
(CVE-2016-5108).
The vlc package has been updated to version 2.2.4, which fixes this issue
and other bugs.
Also, the mad package has been patched to fix an out-of-bounds write which
could cause VLC or other applications linked to that library to crash on
an invalid mp3 file.
Affected Products
| Vendor | Product | Versions | Platforms |
|---|---|---|---|
| Mageia | mad | 0 (affected), * (unaffected) | — |
| Mageia | vlc | 0 (affected), 2.2.4-1.mga5 (unaffected), 0 (affected), 2.2.4-1.mga5.tainted (unaffected) | — |
Aliases
Browse GCVE Records
72,921 records in the GCVE database · Updated July 15, 2026
No matching records found.
Explore Further
Investigate this vulnerability in the interactive console or download the raw GCVE record.