Release of VLC 3.0.10 media player with vulnerabilities fixed

Submitted by media player corrective release VLC 3.0.10, in which the accumulated Errors and eliminated 7 vulnerabilities, which include issues that can be exploited to trigger memory corruption when sending a crafted request to determine the availability of a microdns service, or to read data from areas outside the allocated buffer when processing a crafted image file. The possibility of exploiting problems to organize the execution of the attacker's code is not excluded.

Non-security related changes include improvements to adaptive streaming and various improvements related to MP4, DVD, SMB and AV1. Improved support for macOS Catalina and fixed video rendering issues on macOS. At the same time, mobile app updates for iOS (3.2.8) and Android (3.2.11) were also released, fixing the same vulnerabilities.

Source: opennet.ru

Add a comment