A patch does not yet exist for a critical buffer overflow vulnerability in VLC Media Player that could enable remote code execution.
Source: Threadpost