The four patched vulnerabilities could have been used by a malicious third party to trigger either a crash of VLC or an arbitrary code execution with privileges. The fixed bugs include a denial of service issue that could be triggered with a wrong mp4 file (div by 0) (#27202), some crashes with multiple files due to double free (#26930), a denial of service issue that could be triggered with a wrong oog file (null pointer dereference) (#27294) and a potential buffer overflow in the vnc module that could trigger remote code execution through a malicious vnc URL (#27335, CVE-2022-41325).

Blu-ray (BD-J) menus seem to work as intended now, even though things are a bit rough with Ultra HD Blu-ray discs according to some brief tests conducted with recently purchased releases.įinally, the new VLC includes fixes for multiple security issues, which are detailed on the latest official security bulletin.

VLC media player 3.0.18 also updates the library handling Blu-ray (unprotected/ decrypted) optical discs, finally solving one of the most longstanding bugs cursing the program. The list of libraries and components that were updated includes FFmpeg - a suite which is essentially the beating heart of many media-related, open source projects - upnp, x265, libsmb2, dav1d, libass, zlib, GnuTLS, mpg123, and more.

The new media player fixes seeking for some media formats, improves file compatibility with older GPUs, and remedies select SMB protocol behaviors.įurthermore, the update avoids a playlist live loop in case of only very tiny or failed items, solves 'numerous' crash-related bugs and adds support for DVBSub inside MKV media files. VLC media player 3.0.18 adds support for a few formats, improves adaptive streaming support, fixes some crashes and updates many third party libraries, VideoLAN said. VLC 3.0.18 is the 19th update of the 'Vetinari' codebase, and is a much needed one for both casual users and longtime fans of the program. VideoLAN, the non-profit organization promoting the power of open source to rock the multimedia world, has just released a new version of VLC media player. A new version released a couple of days ago brings further improvements for the program's compatibility, stability, security and format support. Why it matters: VLC is universally regarded as one of the best (if not the best) media players available today.

Vlc media player trustworthy