CVE-2017-8311 on Ubuntu 16.04 LTS (xenial) - medium.
Description:
Potential heap based buffer overflow in ParseJSS in VideoLAN VLC before 2.2.5 due to skipping NULL terminator in an input string allows attackers to execute arbitrary code via a crafted subtitles file.