Since its very early days in 1996, VideoLAN software is written in programming languages of the C family (mostly plain C with additions in C++ and Objective-C) with the notable exception of its port to Android, which was started in Java and recently transitioned to Kotlin. VLC does not use the log4j library on any platform and is therefore unaffected by any related security implications.
We are pleased to release version 3.4.0 of the VLC version for the Android platforms.
Still based on libVLC 3, it revamps the Audio Player and the Auto support, it adds bookmarks in each media, simplifies the permissions and improves video grouping. See our Android page.
Today, VideoLAN is publishing the 3.0.16 release of VLC, which fixes delays when seeking on Windows, opening DVD folders with non-ASCII character names, fixes HTTPS support on Windows XP, addresses audio drop-outs on seek with specific MP4 content and improves subtitles renderering. It also adds support for the TouchBar on macOS. More details on the release page.
VLC users on Windows might encounter issues when trying to auto update VLC from version 3.0.12 and 3.0.13. Find more details here. We are publishing version 3.0.14 to address this problem for future updates.