Threats affecting pkg:github/videolan/vlc

VLC media player versions before 3.0.24 have a path traversal vulnerability in the skins2 ThemeLoader component. This flaw allows attackers to craft malicious skin files that bypass validation and write arbitrary files with the privileges of the VLC user. Exploitation can lead to code execution through Lua script injection.