CVE-2022-41325

An integer overflow in the VNC module in VideoLAN VLC Media Player through 3.0.17.4 allows attackers, by tricking a user into opening a crafted playlist or connecting to a rogue VNC server, to crash VLC or execute code under some conditions.

An integer overflow in the VNC module in VideoLAN VLC Media Player through 3.0.17.4 allows attackers, by tricking a user into opening a crafted playlist or connecting to a rogue VNC server, to crash VLC or execute code under some conditions.

This update for vlc fixes the following issues:

• Update to version 3.0.18 (CVE-2022-41325, boo#1206142):
  • macOS: Fix audio device listing with non-latin names.
  • Misc: Fix rendering and performance issue with older GPUs.
  • Updated translations.
• Changes from version 3.0.18-rc2:
  • Codec/Demux:
    • Add support for Y16 chroma.
    • Fix build of gme plugin.
  • Lua:
    • Fix script for vocaroo.
    • Fix script for youtube to allow throttled playback.
  • Service Discovery: Fix UPnP regression on Windows.
  • Video Output: Fix video placement with caopengllayer.
  • Misc: Fix password search in kwallet module.
• Changes from version 3.0.18-rc:
  • Demux:
    • Major adaptive streaming update, notably for multiple timelies and webvtt.
    • Fix seeking with some fragmented MP4 files.
    • Add support for DVBSub inside MKV.
    • Fix some Flac files that could not be played.
    • Improve seeking in Ogg files.
  • Decoders:
    • Fix DxVA/D3D11 crashes on HEVC files with bogus references.
    • Fix libass storage size and crash.
    • Fix decoding errors on macOS hw decoding on some HEVC files.
  • Video Output:
    • Fix color regression with VAAPI/iOS and OpenGL output.
    • Fix some resizing issues with OpenGL on GLX/EGL/X11/XV.
    • Fix Direct3d9 texture stretching.
    • Fix 10-bit accelerated video filters on macOS.
  • Playlist: Avoid playlist liveloop on failed/tiny items (temporize EOS bursts).
  • Misc:
    • Misc fixes for the extension UI on macOS.
    • Improve SMBv1 and SMBv2 behaviours.
    • Improve FTP compatibility.
    • Support RISC-V.
    • Fix AVI muxing for Windows Media Player compatibility.
    • Fix seeking speed on macOS.

This update for vlc fixes the following issues:

• Update to version 3.0.18 (CVE-2022-41325, boo#1206142):
  • macOS: Fix audio device listing with non-latin names.
  • Misc: Fix rendering and performance issue with older GPUs.
  • Updated translations.
• Changes from version 3.0.18-rc2:
  • Codec/Demux:
    • Add support for Y16 chroma.
    • Fix build of gme plugin.
  • Lua:
    • Fix script for vocaroo.
    • Fix script for youtube to allow throttled playback.
  • Service Discovery: Fix UPnP regression on Windows.
  • Video Output: Fix video placement with caopengllayer.
  • Misc: Fix password search in kwallet module.
• Changes from version 3.0.18-rc:
  • Demux:
    • Major adaptive streaming update, notably for multiple timelies and webvtt.
    • Fix seeking with some fragmented MP4 files.
    • Add support for DVBSub inside MKV.
    • Fix some Flac files that could not be played.
    • Improve seeking in Ogg files.
  • Decoders:
    • Fix DxVA/D3D11 crashes on HEVC files with bogus references.
    • Fix libass storage size and crash.
    • Fix decoding errors on macOS hw decoding on some HEVC files.
  • Video Output:
    • Fix color regression with VAAPI/iOS and OpenGL output.
    • Fix some resizing issues with OpenGL on GLX/EGL/X11/XV.
    • Fix Direct3d9 texture stretching.
    • Fix 10-bit accelerated video filters on macOS.
  • Playlist: Avoid playlist liveloop on failed/tiny items (temporize EOS bursts).
  • Misc:
    • Misc fixes for the extension UI on macOS.
    • Improve SMBv1 and SMBv2 behaviours.
    • Improve FTP compatibility.
    • Support RISC-V.
    • Fix AVI muxing for Windows Media Player compatibility.
    • Fix seeking speed on macOS.

This update for vlc fixes the following issues:

Update to version 3.0.20:

• Video Output:
  • Fix green line in fullscreen in D3D11 video output
  • Fix crash with some AMD drivers old versions
  • Fix events propagation issue when double-clicking with mouse wheel
• Decoders:
  • Fix crash when AV1 hardware decoder fails
• Interface:
  • Fix annoying disappearance of the Windows fullscreen controller
• Demuxers:
  • Fix potential security issue (OOB Write) on MMS:// by checking user size bounds

Update to version 3.0.19:

• Core:
  • Fix next-frame freezing in most scenarios
• Demux:
  • Support RIFF INFO tags for Wav files
  • Fix AVI files with flipped RAW video planes
  • Fix duration on short and small Ogg/Opus files
  • Fix some HLS/TS streams with ID3 prefix
  • Fix some HLS playlist refresh drift
  • Fix for GoPro MAX spatial metadata
  • Improve FFmpeg-muxed MP4 chapters handling
  • Improve playback for QNap-produced AVI files
  • Improve playback of some old RealVideo files
  • Fix duration probing on some MP4 with missing information
• Decoders:
  • Multiple fixes on AAC handling
  • Activate hardware decoding of AV1 on Windows (DxVA)
  • Improve AV1 HDR support with software decoding
  • Fix some AV1 GBRP streams, AV1 super-resolution streams and monochrome ones
  • Fix black screen on poorly edited MP4 files on Android Mediacodec
  • Fix rawvid video in NV12
  • Fix several issues on Windows hardware decoding (including 'too large resolution in DxVA')
  • Improve crunchyroll-produced SSA rendering
• Video Output:
  • Super Resolution scaling with nVidia and Intel GPUs
  • Fix for an issue when cropping on Direct3D9
  • Multiple fixes for hardware decoding on D3D11 and OpenGL interop
  • Fix an issue when playing -90�rotated video
  • Fix subtitles rendering blur on recent macOS
• Input:
  • Improve SMB compatibility with Windows 11 hosts
• Contribs:
  • Update of fluidlite, fixing some MIDI rendering on Windows
  • Update of zlib to 1.2.13 (CVE-2022-37434)
  • Update of FFmpeg, vpx (CVE-2023-5217), ebml, dav1d, libass
• Misc:
  • Improve muxing timestamps in a few formats (reset to 0)
  • Fix some rendering issues on Linux with the fullscreen controller
  • Fix GOOM visualization
  • Fixes for Youtube playback
  • Fix some MPRIS inconsistencies that broke some OS widgets on Linux
  • Implement MPRIS TrackList signals
  • Fix opening files in read-only mode
  • Fix password search using the Kwallet backend
  • Fix some crashes on macOS when switching application
  • Fix 5.1/7.1 output on macOS and tvOS
  • Fix several crashes and bugs in the macOS preferences panel
  • Improvements on the threading of the MMDevice audio output on Windows
  • Fix a potential security issue on the uninstaller DLLs
  • Fix memory leaks when using the media_list_player libVLC APIs
• Translations:
  • Update of most translations
  • New translations to Esperanto, Interlingue, Lao, Macedonian, Burmese, Odia, Samoan and Swahili

These are all security issues fixed in the libvlc5-3.0.18-4.1 package on the GA media of openSUSE Tumbleweed.

It was discovered that VLC could be made to read out of bounds when decoding image files. If a user were tricked into opening a crafted image file, a remote attacker could possibly use this issue to cause VLC to crash, leading to a denial of service. This issue only affected Ubuntu 16.04 LTS and Ubuntu 18.04 LTS. (CVE-2019-19721)

It was discovered that VLC could be made to write out of bounds when processing H.264 video files. If a user were tricked into opening a crafted H.264 video file, a remote attacker could possibly use this issue to cause VLC to crash, leading to a denial of service, or possibly execute arbitrary code. This issue only affected Ubuntu 18.04 LTS and Ubuntu 20.04 LTS. (CVE-2020-13428)

It was discovered that VLC could be made to read out of bounds when processing AVI video files. If a user were tricked into opening a crafted AVI video file, a remote attacker could possibly use this issue to cause VLC to crash, leading to a denial of service. This issue only affected Ubuntu 16.04 LTS, Ubuntu 18.04 LTS, and Ubuntu 20.04 LTS. (CVE-2021-25801, CVE-2021-25802, CVE-2021-25803, CVE-2021-25804)

It was discovered that the VNC module of VLC contained an arithmetic overflow. If a user were tricked into opening a crafted playlist or connecting to a rouge VNC server, a remote attacker could possibly use this issue to cause VLC to crash, leading to a denial of service, or possibly execute arbitrary code. (CVE-2022-41325)