CVE-2017-17670

In VideoLAN VLC media player through 2.2.8, there is a type conversion vulnerability in modules/demux/mp4/libmp4.c in the MP4 demux module leading to a invalid free, because the type of a box may be changed between a read operation and a free operation.

• CWE-416

• http://openwall.com/lists/oss-security/2017/12/15/1Exploit, Mailing List, Third Party Advisory
• http://www.securityfocus.com/bid/102214Third Party Advisory, VDB Entry
• http://www.securitytracker.com/id/1040938Third Party Advisory, VDB Entry
• https://www.debian.org/security/2018/dsa-4203Third Party Advisory
• http://openwall.com/lists/oss-security/2017/12/15/1Exploit, Mailing List, Third Party Advisory
• http://www.securityfocus.com/bid/102214Third Party Advisory, VDB Entry
• http://www.securitytracker.com/id/1040938Third Party Advisory, VDB Entry
• https://www.debian.org/security/2018/dsa-4203Third Party Advisory

Published

Dec 15, 2017

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2017-17663The htpasswd implementation of mini_httpd before v1.28 and o…
• CVE-2017-17664A Remote Crash issue was discovered in Asterisk Open Source …
• CVE-2017-17665In Octopus Deploy before 4.1.3, the machine update process d…
• CVE-2017-17668Memory write mechanism in NCR S1 Dispenser controller before…
• CVE-2017-17669There is a heap-based buffer over-read in the Exiv2::Interna…5.5
• CVE-2017-1767IBM Business Process Manager 8.6 is vulnerable to cross-site…5.4
• CVE-2017-17671vBulletin through 5.3.x on Windows allows remote PHP code ex…9.8
• CVE-2017-17672In vBulletin through 5.3.x, there is an unauthenticated dese…
• CVE-2017-17674BMC Remedy Mid Tier 9.1SP3 is affected by remote and local f…9.8
• CVE-2017-17675BMC Remedy Mid Tier 9.1SP3 is affected by log hijacking. Rem…5.3
• CVE-2017-17677BMC Remedy 9.1SP3 is affected by authenticated code executio…8.8
• CVE-2017-17678BMC Remedy Mid Tier 9.1SP3 is affected by cross-site scripti…6.1