# VLC Media Player security and engine updates

> Live situation record from CLSTR: https://clstr.news/situations/vlc-media-player-security-and-engine-updates
> Updated: 2026-09-28T02:57:20.000Z. Sources: 7. Developments: 3.

The VideoLAN project released VLC Media Player version 3.0.24, a major update centered on addressing more than 130 security vulnerabilities. These flaws, which included buffer overflows, out-of-bounds reads/writes, integer overflows, and use-after-free errors, could have allowed attackers to compromise systems through malicious media files.

Jean-Baptiste Kempf, president of VideoLAN, noted that the scale of this update surpasses the previous record set in 2019. The increased efficiency in identifying these bugs is attributed in part to the growing use of Large Language Models (LLMs) for code analysis.

Technical enhancements accompanying the security fixes include upgrading FFmpeg from version 4.4 to 8.1.2, which enables the decoding of the Advanced Professional Video (APV) codec used by Samsung devices. The update also includes Sony’s proprietary ATRAC3 and ATRAC9 audio codecs, support for CEA-708 closed captions in MP4, and improved SFTP support with ED25519 hostkey support. Additionally, the release features enhanced RIST input/output capabilities, improved subtitle language detection, a new RSA-4096 encryption key to verify software update integrity, and official Flatpak support for Linux.

## Timeline

### 2026-09-28: VLC releases major 3.0.24 update with 130+ security fixes

VLC has released version 3.0.24, featuring a record-breaking 130+ security fixes and new codec support for APV and Sony ATRAC formats.

3 sources. https://clstr.news/cluster/vlc-releases-major-3024-update-with-130-security-fixes

### 2026-09-25: VLC Media Player releases version 3.0.24 with security updates

VideoLAN has released VLC Media Player 3.0.24, featuring over 130 security fixes, FFmpeg upgrades, and expanded format support for various operating systems.

2 sources. https://clstr.news/cluster/vlc-media-player-releases-version-3024-with-security-updates

### 2026-09-22: VideoLAN releases VLC Media Player 3.0.24 with major security fixes

VideoLAN released VLC Media Player 3.0.24, fixing over 130 security vulnerabilities and upgrading the FFmpeg engine to version 8.1.2 across Windows, macOS, and Linux platforms.

2 sources. https://clstr.news/cluster/videolan-releases-vlc-media-player-3024-with-major-security-fixes

---
Cite as: VLC Media Player security and engine updates. CLSTR, https://clstr.news/situations/vlc-media-player-security-and-engine-updates