CVE-2016-3941 on Ubuntu 16.04 LTS (xenial) - medium.
Description:
Buffer overflow in the AStreamPeekStream function in input/stream.c in VideoLAN VLC media player before 2.2.0 allows remote attackers to cause a denial of service (crash) via a crafted wav file, related to "seek across EOF."