David Thiel

**Name of the Vulnerable Software and Affected Versions** VLC Media Player version 0.8.6 and earlier **Description** The issue allows remote attackers to cause a denial of service via a crafted WAV file. Multiple vulnerabilities in the VLC Media Player package may lead to a breach of confidentiality, integrity, and availability of protected information. These vulnerabilities can be exploited remotely. **Recommendations** For versions prior to 0.8.6, update to version 0.8.6c or later to resolve the issue. As a temporary workaround, consider avoiding the use of crafted WAV files until a patch is available. Restrict access to the vulnerable `input.c` file to minimize the risk of exploitation.