plugins\audio_filter\libmpgatofixed32_plugin.dll in VideoLAN VLC media player 2.2.4 allows remote attackers to cause a denial of service (invalid read and application crash) or possibly have unspecified other impact via a crafted file.
https://euvd.enisa.europa.eu/vulnerability/EUVD-2017-18237
http://www.securityfocus.com/bid/98746
http://code610.blogspot.com/2017/04/multiple-crashes-in-vlc-224.html