VLC Media Player

videolan.org/vlc
VLC Media Player

Free, cross-platform media player from the non-profit VideoLAN project. Plays almost any audio or video format locally, with no ads, trackers or telemetry. VLC has many powerful features and settings, but the UI can initially be hard to use.

Open Source

VLC Media Player Source Code

Author

videolan

Description

VLC media player - plays everything, runs anywhere. Code here: https://code.videolan.org/videolan/vlc

#c#framework#gplv2#lgpl#multimedia#open-source#vlc

Homepage

http://www.videolan.org/vlc

Repository

  • LicenseGPL-2.0
  • Created29 Jan 12
  • Primary languageC
  • Size678,634 KB
  • Stars19,938
  • Forks6,235
  • Watchers19,938

Language Usage

Language Usage

Project Health

  • Last commit1 hour ago
  • Open issues2
  • Latest releasesvn-trunk

Top Contributors

Recent Commits

  • Claudio Cambra(05 Oct 26)

    macosx: Perform group cache refresh if group change affects cache membership or ordering This happens if e.g. using alphabetical ordering and the group name changes Signed-off-by: Claudio Cambra <[email protected]>

  • Wassim Lalaoui(18 Aug 26)

    meta_engine: ID3: honour the BOM of UTF-16 text Fix UTF-16 ID3 text ignoring its BOM: encoding 0x01 was always decoded as UTF-16LE while 0x01 should also support big-endian.

  • Wassim Lalaoui(05 Oct 26)

    meta_engine: ID3: fix the TXXX value offset with UTF-16 keys Fix the offset of TXXX values, it was computed from the length of the key converted to UTF-8 instead of its length in the tag, so with UTF-16 keys the value was read from the middle of the key

  • Wassim Lalaoui(07 Oct 26)

    meta_engine: ID3: use enum for text encodings

  • Wassim Lalaoui(07 Oct 26)

    build: require libgcrypt 1.8.5 or higher

  • Wassim Lalaoui(16 Sept 26)

    configure.ac: handle gcrypt with PKG_CHECK_MODULES

  • Wassim Lalaoui(16 Sept 26)

    meson: remove gpg_error dependency for access_output_livehttp

  • Wassim Lalaoui(16 Sept 26)

    access: replace gpg_strerror by gcry_strerror this removes gpg_error dependency

  • Wassim Lalaoui(14 Sept 26)

    meson: sid: do not abort setup when resid-builder is missing It avoids build being aborted in some cases, for example if a system provides libsidplay2 without resid-builder.

  • Steve Lhomme(07 Oct 26)

    package/win32: use the regular comment character for NSIS with meson The autotools replacement is not flexible and luckily '#' is accepted. But it's better to use the same one already used in the file.

  • Steve Lhomme(16 Jul 26)

    package/win32: do not try to install locale folder if disabled

  • Steve Lhomme(16 Jul 26)

    package/win32: do not register skins if not build

  • Steve Lhomme(10 Jul 26)

    package/win32: use the product name for the launch on exit

  • Steve Lhomme(07 Oct 26)

    package/win32: add space to escape autotools values meson doesn't escape the strings properly if they are glued together [^1]. [^1]: https://github.com/mesonbuild/meson/issues/16245

  • Steve Lhomme(07 Oct 26)

    meson: use cmake format to configure .nsi files meson doesn't replace the strings with a \ in front otherwise.

  • Alexandre Janniaux(02 Oct 26)

    demux: mp4: check CopyExtradata allocation before copying The copy was guarded by the extradata size, which is always non-zero at that point, instead of the allocation result. On allocation failure p_extra was left NULL and memcpy dereferenced it. Check the allocation result instead.

  • Alexandre Janniaux(02 Oct 26)

    demux: mp4: fix dvc1 allocation error check On allocation failure the box kept i_vc1 set while p_vc1 stayed NULL, and CopyExtradata later read from that NULL pointer. i_vc1 is >0 in this part so simplify and add an allocation check there to fail the box in case of memory allocation failure.

  • Alexandre Janniaux(01 Oct 26)

    demux: mp4: fix unreachabel dvc1 heap overflow The remaining size of the box was stored into the 32 bits i_extra, which was used to allocate the extra data, while the copy used the 64 bits size. A dvc1 box larger than 4GiB would allocate the truncated size and copy the whole box into it. Reject such boxes and copy the size that was allocated. This is unreachable because it needs a >4GB stsd box which the code before that refuses in every cases.

  • Alexandre Janniaux(01 Oct 26)

    demux: mp4: fix unreachable strf heap overflow The remaining size of the box was stored into the 32 bits i_extra, which was used to allocate the extra data, while the copy used the 64 bits size. A strf box larger than 4GiB would allocate the truncated size and copy the whole box into it. Reject such boxes and copy the size that was allocated. This is unreachable because it needs a >4GB stsd box which the code before that refuses in every cases.

  • Alexandre Janniaux(01 Oct 26)

    demux: mp4: wrap MP4_GETVERSIONFLAGS in do/while The macro expanded to two statements, which only works when used as a full statement inside a block, and could lead to surprising behavior depending on where it gets used.

  • Alexandre Janniaux(01 Oct 26)

    demux: mp4: use do/while for cslg read macros The macros were scoped with braces but then it was not possible to add semicolons after the calls. Though valid for C, the code was weird and it was breaking tools that would not do the substitution like coccinelle.

  • Steve Lhomme(09 Oct 26)

    meson: move windows_rc definition after most cdata values are set 'src' is still setting some values for process/spawn.

  • Steve Lhomme(08 Oct 26)

    win32: use a local version of cdata for NSIS/WIX/RC configuration Modiyfing one also modifies the main cdata, overwriting the data and potentially writing after the cdata have been read.

  • Steve Lhomme(08 Oct 26)

    direct3d11: make HAVE_AMF_SCALER a define only in the D3D11 modules Do not share it globally. In meson when using cdata before this detection it complains we are writing in cdata after reading it. This is the only module doing that. We only use the define in one C file, for now. If other platforms support AMF they can use the same system.

  • Steve Lhomme(09 Oct 26)

    package/snap: fix prebuilt tarball check Since 4ac6168d4740b6416fa6abbff30b50b14d370ef9 we need to tell which target is being build.

  • Nicolas Pomepuy(06 Oct 26)

    service discovery/radio: use lowercase single-word extra metadata keys for codec and bitrate

  • Nicolas Pomepuy(18 Sept 26)

    service discovery/radio: expose additional station metadata (votes, clicks)

  • Nicolas Pomepuy(18 Sept 26)

    service discovery/radio: expose country station count metadata

  • Nicolas Pomepuy(18 Sept 26)

    service discovery/radio: move meta helper functions before Run()

  • Martin Finkel(06 Oct 26)

    lib: media_player: remove the pts argument of libvlc_audio_flush_cb The amem audio output has always called the flush callback with the opaque pointer only, since the callback was added in 4cc939684b. The pts argument was therefore never set, and calling the user callback through a function pointer of a different type is undefined behavior. The core audio output flush does not carry any timestamp, so there is no meaningful value to pass. Remove the argument, which also makes the callback consistent with libvlc_audio_drain_cb.

VLC Media Player Security

4.5/10

Repo Security Summary

Updated 24 Aug 26 Fuzz tested

  • PackagingN/A
  • Code-Review0/10
  • Dangerous-WorkflowN/A
  • Token-PermissionsN/A
  • Maintained10/10
  • CII-Best-Practices0/10
  • Security-Policy0/10
  • License10/10
  • Signed-ReleasesN/A
  • SAST0/10
  • Branch-Protection0/10
  • Binary-Artifacts10/10
  • Fuzzing10/10
  • Pinned-DependenciesN/A

VLC Media Player Website

Website

Official download of VLC media player, the best Open Source player - VideoLAN

Official download of VLC media player, the best Open Source player

Redirects

Does not redirect

Security Checks

All 65 security checks passed

Server Details

  • IP Address213.36.253.2
  • Hostnamegoldeneye.videolan.org
  • LocationParis,Ile-de-France,France,EU
  • ISPScaleway SAS
  • ASNAS12322

Associated Countries

  • FRFR

Safety Score

Website marked as safe

100%

Blacklist Check

www.videolan.org was found on 0 blacklists

  • AntiSocial Blacklist
  • Artists Against 419
  • Badbitcoin
  • Bambenek Consulting
  • CERT Polska
  • CoinBlockerLists
  • CRDF
  • CryptoScamDB
  • EtherAddressLookup
  • EtherScamDB
  • Fake Website Buster
  • MetaMask EthPhishing
  • NABP Not Recommended Sites
  • OpenPhish
  • PetScams
  • PhishFeed
  • PhishFort
  • Phishing.Database
  • PhishStats
  • PhishTank
  • Phishunt
  • RPiList Not Serious
  • Scam.Directory
  • SecureReload Phishing List
  • Spam404
  • StopGunScams
  • Suspicious Hosting IP
  • ThreatFox
  • ThreatLog
  • TweetFeed
  • URLhaus
  • ViriBack C2 Tracker

Website Preview

Website preview

VLC Media Player Android App

APK Info

De-Googled Compatibility

Native3.98/ 463 ratings
microG4.00/ 430 ratings
  • GrapheneOSNative4.0 / 4(41)
  • LineageOSNative4.0 / 4(14)
  • e OSmicroG4.0 / 4(8)
  • CalyxOSmicroG4.0 / 4(8)
  • LineageOSmicroG4.0 / 4(5)
  • iodeOSmicroG4.0 / 4(4)

Tested on Android 6–17 · Updated 06 Sept 26 · View on Plexus →

Trackers

No trackers found

    Permissions

    • Access Network State
    • Bluetooth
    • Internet
    • Modify Audio Settings
    • Receive Boot Completed
    • System Alert Window
    • Vibrate
    • Wake Lock
    • Write External Storage
    • Write Settings
    • Bind Data Consumer
    • Read Extension Data

    VLC Media Player iOS App

    App Info

    VLC media player

    VLC is a free and open source cross-platform multimedia player. It can play all your movies, shows and music in most formats directly without conversion. It allows file synchronization with Dropbox, GDrive, OneDrive, Box, iCloud Drive, iTunes, direct downloads and through Wi-Fi sharing as well as streaming from SMB, FTP, SFTP, NFS, UPnP/DLNA media servers and the web. VLC offers support for advanced subtitles including full SSA compatibility, multi-track audio, playback speed control and rendering through Chromecast. VLC is completely free and open source.

    Rating

    Rated 3.71 out of 5 stars by 5,877 users

    Version Info

    • Current Version3.7.3
    • Last Updated24 Apr 26
    • First Released19 Jul 13
    • Minimum iOS Version9.0
    • Device Models Supported139

    App Details

    • IPA Size186.22 Mb
    • PriceFree (USD)
    • Age Advisory4+
    • Supported Languages48
    • DeveloperVideoLAN
    • Bundle IDorg.videolan.vlc-ios

    Screenshots

    • App screenshot
    • App screenshot
    • App screenshot
    • App screenshot

    VLC Media Player Reviews

    More Video Players

    ⚠️ This section is still a work in progress ⚠️
    Check back soon, or help us complete it by submiting a pull request on GitHub.
    Or submit an entry here

    About the Data: VLC Media Player

    Change History

    Edit VLC Media Player Data

    You can edit VLC Media Player's entry in this section of awesome-privacy.yml by submitting a PR to our GitHub repo.
    Note that some of the information shown above has been aggregated from external sources, a list of these can be found data documentation.

    Origin Data

    Modify Data

    API

    You can access VLC Media Player's data programmatically via our API. Simply make a GET request to:

    https://api.awesome-privacy.xyz/v1/services/vlc-media-player

    The REST API is free, no-auth and CORS-enabled. To learn more, view the API Docs or read the API Usage Guide.

    Share VLC Media Player

    Help your friends compare Video Players, and pick privacy-respecting software and services.
    Share VLC Media Player and Awesome Privacy with your network!