Attackers can remotely execute code on targeted systems via specially crafted subtitle files for videos.
Source: Threadpost