A critical vulnerability in the VLC media player has been identified, allowing attackers to execute malicious code on users’ computers. The vulnerability, detailed in the Security Bulletin VLC 3.0.21, affects versions 3.0.20 and earlier of the popular media player.
The issue arises from a potential integer overflow that can be triggered by a maliciously crafted MMS (Microsoft Media Server) stream, leading to a heap-based overflow.
https://cybersecuritynews.com/vlc-playe ... ious-code/