In dec_vlc_read of oapv_vlc.c, there is a possible out-of-bounds read due to a heap buffer...

In dec_vlc_read of oapv_vlc.c, there is a possible out-of-bounds read due to a heap buffer overflow. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.