VLC versions 2.2.8 and below suffer from a type conversion vulnerability in the MP4 demux module. Continue reading...