: Malicious code can be embedded in subtitle files to exploit vulnerabilities in media players (like VLC, Kodi, or Popcorn Time).