USN-7243-1: VLC vulnerability

USN-7243-1: VLC vulnerability
30 January 2025

VLC could be made to crash or run programs if it received specially crafted network traffic.

Releases

• Ubuntu 24.04 LTS
• Ubuntu 22.04 LTS
• Ubuntu 20.04 LTS
• Ubuntu 18.04 ESM
• Ubuntu 16.04 ESM

Packages
vlc - multimedia player and streamer

Details
It was discovered that VLC incorrectly handled memory when reading an MMS
stream. An attacker could possibly use this issue to cause a denial of
service or execute arbitrary code.

Update instructions
The problem can be corrected by updating your system to the following package versions:

Ubuntu 24.04
vlc - 3.0.20-3ubuntu0.1~esm1
Available with Ubuntu Pro

In general, a standard system update will make all the necessary changes.