Two security flaws have been found in VLC Media Player, and they could put users at risk if they open malicious files or streams. They are tracked as “CVE-2026-56711” and “CVE-2026-73324” and affect VLC 3.0.0 through 3.0.23. > The first one is the more serious issue. A specially made PNG image, a malicious image could cause a memory error that may lead to a crash or, in some cases, potentially allow an attacker to run code. > The second vulnerability affects RTSP streaming, a malicious server could potentially make VLC read data from memory that it shouldn’t be able to access. The good news is that an attacker generally needs to trick the user into opening a malicious file, playlist or stream. Just use your brain and avoid opening media from unknown sources and update VLC as soon as a security fix is available.