CVE-2014-9627

CVE-2014-9627 is a denial-of-service vulnerability affecting VideoLAN VLC media player versions prior to 2.1.6. It stems from an incorrect 64-bit to 32-bit integer cast in the MP4_ReadBox_String function, allowing remote attackers to crash the application or potentially achieve other unspecified impacts via a crafted MP4 file with a large box size. Rated as High severity (CVSS 7.8), exploitation requires user interaction (UI:R) and local access (AV:L), but with low attack complexity (AC:L). There is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage surrounding this vulnerability.