VLC Media Player Heap Out-of-Bounds Write via Integer Overflow in AllocatePicture

#Requires -Version 5.1
<# Check-CVE-2026-56711.ps1
   Checks whether VLC media player is installed and vulnerable to CVE-2026-56711.
   Affected: 3.0.0 – 3.0.23  |  Fixed: 3.0.24+
   Exit codes: 1 = VULNERABLE, 0 = PATCHED, 2 = UNKNOWN
#>

$vlcPaths = @(
    "$env:ProgramFiles\VideoLAN\VLC\vlc.exe",
    "${env:ProgramFiles(x86)}\VideoLAN\VLC\vlc.exe",
    "$env:LOCALAPPDATA\Programs\VideoLAN\VLC\vlc.exe"
)

$found = $false
foreach ($p in $vlcPaths) {
    if (Test-Path $p) {
        $found = $true
        $ver = (Get-Item $p).VersionInfo.ProductVersion
        if (-not $ver) { $ver = (Get-Item $p).VersionInfo.FileVersion }
        if (-not $ver) {
            Write-Output "UNKNOWN - VLC found at $p but version unreadable"
            exit 2
        }
        try {
            $parts = $ver.Split('.')
            $major = [int]$parts[0]
            $minor = [int]$parts[1]
            $patch = [int]($parts[2] -replace '[^0-9]','')
        } catch {
            Write-Output "UNKNOWN - could not parse version '$ver' at $p"
            exit 2
        }
        if ($major -eq 3 -and $minor -eq 0 -and $patch -le 23) {
            Write-Output "VULNERABLE - VLC $ver at $p (CVE-2026-56711: affected 3.0.0-3.0.23)"
            exit 1
        } elseif ($major -gt 3 -or ($major -eq 3 -and $minor -gt 0) -or ($major -eq 3 -and $minor -eq 0 -and $patch -ge 24)) {
            Write-Output "PATCHED - VLC $ver at $p (fixed in 3.0.24+)"
            exit 0
        } else {
            Write-Output "PATCHED - VLC $ver at $p (version outside affected 3.0.x range)"
            exit 0
        }
    }
}
if (-not $found) {
    Write-Output "PATCHED - VLC media player not installed (not vulnerable)"
    exit 0
}