The VLC open-source media player is affected by two security vulnerabilities that can allow an attacker to run arbitrary code on vulnerable machines. The vulnerabilities affect version 2.1.5 of VLC media player, but it is important to highlight that they could be exploited only on outdated Windows XP operating system. Both vulnerabilities have not been fixed by VideoLAN, the organization that maintains VLC, for this reason, Veysel Hatas decided to publicly disclose the flaw by publishing two advisories.”]
Source: https://securityaffairs.co/wordpress/32464/hacking/2-flaws-vlc-media-player.html