VideoLAN Released VLC 3.0.24 With 130 Security Patches
The update improves software security and sustainability while integrating new codec support and updated cryptographic verification.
Updated on Sept. 23, 2026 in Cybersecurity
Live Poll
Do you generally trust that new software security updates will improve your computer's performance?
VideoLAN has released VLC version 3.0.24, an update that patches over 130 security vulnerabilities. This release also upgrades the internal software architecture to bolster system stability.
Why it matters
The update reinforces the long-term sustainability and security of the widely used media player, addressing a significant backlog of vulnerabilities. It also modernizes the software's cryptographic foundation to better protect users during the update process.
VLC 3.0.24 upgrades its FFmpeg multimedia engine from version 4.4 to 8.1.2 and updates 49 distinct third-party libraries. Update verification now utilizes an RSA-4096 cryptographic key to secure the distribution pipeline.
The players
VideoLAN
The non-profit organization behind the open-source VLC media player, focused on developing cross-platform multimedia software.
Google OSS-Fuzz
An open-source initiative that uses automated fuzzing to identify and report software vulnerabilities in critical projects.
The details
The update incorporates new decoding capabilities for APV video alongside ATRAC3 and ATRAC9 audio formats to expand media compatibility. Developers also introduced SFTP public key authentication using ED25519 hostkeys, a secure method for verifying server identity. VideoLAN improved the Windows startup experience by fixing a latency bug triggered by Daylight Saving Time, while removing the legacy NPAPI browser plugin and disabling the RealRTSP protocol to reduce the software attack surface.
Timeline
September 22, 2026: VLC 3.0.24 was officially released.
Coming days: VideoLAN will publish detailed security advisories.
The Tech Race
This release marks a significant architecture jump for the underlying FFmpeg multimedia framework within the player. By moving from version 4.4 to 8.1.2, VideoLAN aligns its technical stack with modern decoding standards used across the global media software landscape.
Users can download the updated version immediately from the official VideoLAN website or via their platform's package manager. The update is essential for all Windows and macOS users to maintain security and resolve known startup performance issues.
The takeaway
Security-conscious users should apply this update immediately to mitigate the 130+ identified vulnerabilities. Watch for the forthcoming detailed security advisories from the project to understand the specific risks that have now been neutralized.
What happens next
Users should watch for the forthcoming publication of specific security advisories, which will detail the nature of the 130+ vulnerabilities addressed in this release.
Further reading
For broader trends in open-source software safety, visit the Cybersecurity section.
Live Poll
Do you generally trust that new software security updates will improve your computer's performance?
