When parsing the header of an invalid TY file, the heap might be corrupted. Commit: http://git.videolan.org/?p=vlc.git;a=commith=7d282fac1cc455b5a5eca2bb56375efcbf879b06 Workarounds: The user should refrain from opening files from untrusted third parties or accessing untrusted remote sites (or disable the VLC browser plugins), until the patch is applied. Alternatively, the TY demux plugin (libty_plugin.*) can be removed manually from the VLC plugin installation directory. This will prevent opening of TiVo files.
*** This bug has been marked as a duplicate of bug 395543 ***