The VideoLAN Forums

Does VLC on Android use the (vulnerable) Stagefright library?

If so, does it only use the library when hardware acceleration is enabled, or at all times?

Thank you!

We use MediaCodec for HW acceleration on recent Android versions.

I might be wrong, but isn't MediaCodec a part of Stagefright (for example, MediaCodec.h is under Stagefright)?

Or does VLC use a separate MediaCodec of some sort (like self-bundled MediaCodec instead of Android Stagefright's MediaCodec)?

No, it's a component of it.