See
Hacked in Translation - from Subtitles to Complete Takeover | Check Point Blog to read about a hack where manipulated subtitles can give a hacker complete control over your PC.
I'd like to know if BS.Player has the same problem as VLC, Kodi and Popcorn Time had, and if so when we can expect a fix for this very serious problem.