LG has a memcpy in ASFParser::ParseHeaderExtensionObjects that does not check that the size of the copy is smaller than the size of the source buffer, resulting in an out-of-bounds heap read.
f690404919f0a56a0dd98b93cd9b75a9a17ac070cdca41f9c04a645106020710