[REVISION HISTORY]
VLC Media Player security and engine updates
Updated 1 time since CLSTR started tracking revisions of this situation.
What changed
2026-09-25 20:23 UTC → 2026-09-28 14:14 UTC ·
added
removed
The VideoLAN project released VLC Media Player version 3.0.24, a major update centered on addressing more than 130 security vulnerabilities. These flaws, which included buffer overflows overflows, out-of-bounds reads/writes, integer overflows, and use-after-free errors, could have allowed attackers to compromise systems through malicious media files. Jean-Baptiste Kempf, president of VideoLAN, noted that the scale of this update surpasses the previous record set in 2019. The increased efficiency in identifying these bugs is attributed in part to the growing use of Large Language Models (LLMs) for code analysis. Technical enhancements accompanying the security fixes include upgrading FFmpeg from version 4.4 to 8.1.2 and updating 49 third-party libraries. 8.1.2, which enables the decoding of the Advanced Professional Video (APV) codec used by Samsung devices. The release update also introduced new features such as includes Sony’s proprietary ATRAC3 and ATRAC9 decoding, audio codecs, support for CEA-708 closed caption support captions in MP4, and improved subtitle language detection. SFTP support with ED25519 hostkey support. Additionally, the update implemented release features enhanced RIST input/output capabilities, improved subtitle language detection, a new RSA-4096 encryption key to verify software update integrity integrity, and added official Flatpak support for Linux.
Versions
- 2026-09-28 14:14 UTC VLC Media Player security and engine updates
- 2026-09-25 20:23 UTC VLC Media Player security and engine updates
Only revisions since CLSTR began indexing content versions appear here. Select a version to see what changed compared to the one before it.