January 2026 - Wine-Bugs - list.winehq.org

[Bug 56590] New: Buffer Overflow in jpeg_decoder_initialize
by WineHQ Bugzilla May 1, 2026

May 1, 2026

https://bugs.winehq.org/show_bug.cgi?id=56590 Bug ID: 56590 Summary: Buffer Overflow in jpeg_decoder_initialize Product: Wine Version: 9.7 Hardware: x86-64 OS: Linux Status: UNCONFIRMED Severity: major Priority: P2 Component: windowscodecs Assignee: wine-bugs(a)winehq.org Reporter: franco(a)blackwinghq.com Distribution: --- The vulnerable jpeg_decoder_initialize function in file libjpeg.c (https://github.com/wine-mirror/wine/blob/master/dlls/windowscodecs/libjpeg.…) is used to decompress jpegs and create a raw bitmap version of the image. In jpeg_decoder_initialize, the values for cinfo.output_width and cinfo.output_height are retrieved directly from a jpeg file's header. cinfo.output_width and cinfo.output_height can be manipulated by editing the header of the jpeg file being processed. They are two bytes each in the image's header so their values can range from 0x0000 to 0xFFFF. These variables are multiplied with frame.bpp. When these three values are multiplied together they can exceed the limit of a 32-bit unsigned integer, leading to an integer overflow vulnerability. This product is used to set the size of the image_data buffer, which will store the decompressed jpeg (https://github.com/wine-mirror/wine/blob/master/dlls/windowscodecs/libjpeg.…) When the sizing arguments overflow, the buffer becomes too small to store the decompressed data. The program writes the decompressed image to the buffer using the jpeg_read_scanlines function. The function ends up writing to out-of-bounds memory due to the buffer’s small size (https://github.com/wine-mirror/wine/blob/master/dlls/windowscodecs/libjpeg.…) This causes data in memory adjacent to the buffer to be overwritten. An attacker is in control of the image's height, width, and contents. This allows an attacker to craft an exploit to overwrite data in memory with data they control. -- Do not reply to this email, post in Bugzilla using the above URL to reply. You are receiving this mail because: You are watching all bug changes.

2 6

[Bug 59090] New: Roblox Studio opens to a black window on native OpenGL renderer
by WineHQ Bugzilla April 30, 2026

April 30, 2026

http://bugs.winehq.org/show_bug.cgi?id=59090 Bug ID: 59090 Summary: Roblox Studio opens to a black window on native OpenGL renderer Product: Wine Version: 10.20 Hardware: x86-64 OS: Linux Status: UNCONFIRMED Severity: normal Priority: P2 Component: opengl Assignee: wine-bugs(a)list.winehq.org Reporter: eff3ctsb0t(a)gmail.com Distribution: --- Created attachment 79879 --> http://bugs.winehq.org/attachment.cgi?id=79879 Wine debugging log when using Studio's native OpenGL renderer When using Roblox Studio's native OpenGL renderer, the application opens up to a black window. After loading one of the place templates, you notice that most of the child windows are pitch black as well. Steps to reproduce: 1. Create an account on roblox.com. 2. Download the installer for Roblox Studio. 3. Create a desktop entry named "Roblox_Studio.desktop" with the following contents. Replace <user> with the name of your user. [Desktop] Name=Roblox Studio (modified) Exec=env "WINEPREFIX=/home/<user>/.wine" wine "C:\\\\users\\\\<user>\\\\AppData\\\\Roaming\\\\Microsoft\\\\Windows\\\\Start Menu\\\\Programs\\\\Roblox\\\\Roblox Studio.lnk" %u Type=Application StartupNotify=true Icon=2C11_RobloxStudioBeta.0 StartupWMClass=robloxstudiobeta.exe MimeType=x-scheme-handler/roblox-studio-auth 4. Run the installer through Wine. This should also launch Roblox Studio itself once the installation is complete. If not, run the RobloxStudioBeta.exe executable that is located inside the Wineprefix. 5. Upon launching Roblox Studio, you will be greeted by an error prompting you to login via your browser. Follow its instructions. 6. Once you reached the place templates selection, click on the "File" menu on the top left, then on "Studio Settings" and then on "Rendering" in the newly spawned window, where you should change the "Graphics Mode" from "Automatic" to "OpenGL". After that, relaunch Studio. System Information: OS: Arch Linux x86_64 Kernel: Linux 6.17.9-arch1-1 Display Server: Wayland (Niri) GPU: AMD Radeon RX 6650 XT [Discrete] Driver: Mesa 25.2.7-1 Tested on the latest Wine commit (6be650038ccdeed10fb5f6ae2bd8081403b85446) as of writing this. -- Do not reply to this email, post in Bugzilla using the above URL to reply. You are receiving this mail because: You are watching all bug changes.

2 10

[Bug 55653] New: Logitech Extreme 3d Joystick has axes mapped incorrectly
by WineHQ Bugzilla April 30, 2026

April 30, 2026

https://bugs.winehq.org/show_bug.cgi?id=55653 Bug ID: 55653 Summary: Logitech Extreme 3d Joystick has axes mapped incorrectly Product: Wine Version: 8.16 Hardware: x86-64 OS: Linux Status: UNCONFIRMED Severity: normal Priority: P2 Component: dinput Assignee: wine-bugs(a)winehq.org Reporter: jonathan(a)jdcox.net Distribution: --- Using the jstest utility the joystick reports this: Joystick (Logitech Logitech Extreme 3D) has 6 axes (X, Y, Rz, Throttle, Hat0X, Hat0Y) wine control shows that Rz is mapped to the Z axis and the throttle is mapped to the Rz axis in wine. These two should be flipped. I have tested with SDL disabled and enabled and I get the same behavior. This occurs in current wine and in current proton releases. The problem does not occur in Proton 6 series, but does with 7 and later. I am aware this bug tracker is for wine, but using Proton was the best way to test an older, albeit heavily patched, version of wine that I am currently aware of. This issue is a problem because games in the X-Wing and Tie Fighter series of games treat the rudder (or accidental joystick rotation on this cheap joystick) as throttle movements and constantly adjust throttle during gameplay. -- Do not reply to this email, post in Bugzilla using the above URL to reply. You are receiving this mail because: You are watching all bug changes.

2 26

[Bug 56486] New: Battle.net App Crash Cycle on Startup
by WineHQ Bugzilla April 29, 2026

April 29, 2026

https://bugs.winehq.org/show_bug.cgi?id=56486 Bug ID: 56486 Summary: Battle.net App Crash Cycle on Startup Product: Wine Version: 9.5 Hardware: x86-64 OS: Linux Status: UNCONFIRMED Severity: normal Priority: P2 Component: -unknown Assignee: wine-bugs(a)winehq.org Reporter: wschmrdr(a)gmail.com Distribution: --- Created attachment 76256 --> https://bugs.winehq.org/attachment.cgi?id=76256 Backtrace from the Program Error Starting up Battle.net App. Login screen shows with a loading circle as if it's trying to use a saved password to login. I receive a notice that there's an error and Battle.net has to shut down. I close it, and the error shows up again. This continues in a cycle until I use "wineserver -k" to exit. The backtrace saved from this has been attached. I am able to use the Settings button on the login screen for the Battle.net app, as well as typing in a username/password, but I cannot go any farther than that because there is no submit button and it doesn't seem to want to load. Be aware that I had previously been loading Starcraft II directly using the SC2Switcher.exe executable, but because a new version needs to be downloaded, I'm needing to get into the Battle.net app. Not sure if not using the app is a side effect. For the heck of it, I tried running the setup to update Battle.net, and the same thing occurred. -- Do not reply to this email, post in Bugzilla using the above URL to reply. You are receiving this mail because: You are watching all bug changes.

3 27

[Bug 51502] New: Civilization 3 Sound Stutters, loops, and fails (eventually)
by WineHQ Bugzilla April 29, 2026

April 29, 2026

https://bugs.winehq.org/show_bug.cgi?id=51502 Bug ID: 51502 Summary: Civilization 3 Sound Stutters, loops, and fails (eventually) Product: Wine Version: 6.13 Hardware: x86-64 OS: Linux Status: UNCONFIRMED Severity: normal Priority: P2 Component: mountmgr.sys Assignee: wine-bugs(a)winehq.org Reporter: bryan(a)varnernet.com Distribution: --- Audio on Civilization III is just not very good. Typical short sounds stutter, playback sounding badly rendered into the target buffer, loop when they shouldn't, etc. The most common problem is for the sound (all of it) to just stop, or just continuously loop a small soundfile that should have been a one-off play at the triggered point in time. Looks like the app is using dsound, along with winmm to mmioOpenA the .wav's. -- Do not reply to this email, post in Bugzilla using the above URL to reply. You are receiving this mail because: You are watching all bug changes.

2 8

[Bug 57564] New: Siemens Solid Edge 2025: Not drawing SVG ribbon UI icons, software unusable
by WineHQ Bugzilla April 28, 2026

April 28, 2026

https://bugs.winehq.org/show_bug.cgi?id=57564 Bug ID: 57564 Summary: Siemens Solid Edge 2025: Not drawing SVG ribbon UI icons, software unusable Product: Wine Version: 10.0-rc2 Hardware: x86-64 OS: Linux Status: UNCONFIRMED Severity: normal Priority: P2 Component: windowscodecs Assignee: wine-bugs(a)winehq.org Reporter: bugzilla_winehq(a)spirit.re Distribution: --- Created attachment 77653 --> https://bugs.winehq.org/attachment.cgi?id=77653 Log from launching of Edge.exe to exit I am on Fedora 41, latest stable at the time of this report(Dec 18, 2024). Running Siemens Solid Edge 2025, everything launches and the software works, aside from the occasional crash, but the UI seems to be using SVG icons which do not render at all, making the software completely unusable. Steps to reproduce: 1 - Obtain an installer for Solid Edge 2025. Unfortunately I can't provide a direct link as Siemens does not, but you can obtain the installer online relatively easily. Piracy is NOT needed, and you do NOT need a license. Just the original, legitimate installer is all that's required. The Community Edition version is based on 2023/2024, which does not have this problem, and therefore is not suitable for reproduction. You need specifically the latest 2025! 2 - Disable wbemprox.dll, or the installer gets hung up on something(bug, trivial/minor, not important). 3 - Run setup.exe, follow the installation process. 4 - When setup is done, remove the wbemprox.dll disablement. 5 - Run /Program/SELicWiz.exe, select the Free 2D Drafting mode. 6 - It will execute a Powershell script (stub?) to modify the registry. Change the following key to what it tells you it wants to be set as: HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Session Manager\Environment\SE_LICENSE_SERVER 7 - Run /Program/Edge.exe once or twice. It will complain about not having a license once(bug), then on the next launch it will pick up the free 2D drafting mode and launch in that. 8 - Create a new draft, that's the only option you'll see. 9 - Observe the ribbon menu not having any icons visible. The buttons light up on hover, but there are no icons, and as they're icon-only, it makes the software unusable. I believe this is the important bit in the log: 0024:fixme:dxgi:DXGID3D10CreateDevice Ignoring flags 0x20. 0024:fixme:d2d:d2d_device_context_CreateSvgDocument iface 00000000097EBEE0, input_xml_stream 0000000009CDDE00, svg_document 0000000000A1C460 stub! 0024:fixme:wincodecs:FormatConverter_CanConvert Unsupported source format {6fddc324-4e03-4bfe-b185-3d77768dc900} The problem lies somewhere in wincodecs and/or d2d1, which appear to have stubs for SVG rendering. Installing DXVK via winetricks changes nothing. Swapping binaries around from 2023/2024 breaks the software. The icons it's trying to load are located in /Program/ResDLLs/0009/RibbonImage.drx - there are SVG and PNG versions, but cutting out SVG ones doesn't seem to change anything. It's an empty resource DLL. -- Do not reply to this email, post in Bugzilla using the above URL to reply. You are receiving this mail because: You are watching all bug changes.

2 8

[Bug 59344] New: Resident Evil Village hangs before entering the main menu
by WineHQ Bugzilla April 27, 2026

April 27, 2026

http://bugs.winehq.org/show_bug.cgi?id=59344 Bug ID: 59344 Summary: Resident Evil Village hangs before entering the main menu Product: Wine Version: 11.1 Hardware: x86-64 OS: Linux Status: NEW Severity: normal Priority: P2 Component: d3d Assignee: wine-bugs(a)list.winehq.org Reporter: andrey.goosev(a)gmail.com Distribution: --- Using proprietary driver 580.119.02 0ba4:fixme:d3d:wined3d_texture_gl_prepare_texture No GL internal format for format WINED3DFMT_NV12_PLANAR. 0ba4:err:d3d:wined3d_debug_callback 00007FA3EB30F610: "GL_INVALID_ENUM error generated. <internalFormat> not valid.". 0ba4:err:d3d:wined3d_debug_callback 00007FA3EB30F610: "GL_INVALID_VALUE error generated. Invalid texture format.". wine-11.1-114-g648e636256a -- Do not reply to this email, post in Bugzilla using the above URL to reply. You are receiving this mail because: You are watching all bug changes.

1 3

[Bug 41392] New: directory.c: match_filename always false if mask contains "*?"
by wine-bugs＠winehq.org April 27, 2026

April 27, 2026

https://bugs.winehq.org/show_bug.cgi?id=41392 Bug ID: 41392 Summary: directory.c: match_filename always false if mask contains "*?" Product: Wine Version: 1.9.19 Hardware: x86 OS: Linux Status: UNCONFIRMED Severity: normal Priority: P2 Component: ntdll Assignee: wine-bugs(a)winehq.org Reporter: lcmecmac(a)gmail.com Distribution: --- A mask containing '*' followed by '?' will not match any files. For example, "dir *?" does not show any files in a non-empty directory. -- Do not reply to this email, post in Bugzilla using the above URL to reply. You are receiving this mail because: You are watching all bug changes.

3 2

[Bug 25381] New: Trackmania Nation Forever crashes on OS X when sound is enabled
by wine-bugs＠winehq.org April 27, 2026

April 27, 2026

http://bugs.winehq.org/show_bug.cgi?id=25381 Summary: Trackmania Nation Forever crashes on OS X when sound is enabled Product: Wine Version: 1.3.8 Platform: x86 URL: http://www.trackmaniaunited.com OS/Version: Mac OS X 10.6 Status: UNCONFIRMED Severity: normal Priority: P2 Component: -unknown AssignedTo: wine-bugs(a)winehq.org ReportedBy: qparis(a)playonlinux.com Created an attachment (id=32283) --> (http://bugs.winehq.org/attachment.cgi?id=32283) Screenshot + Terminal content Application : Track Mania Nation forever (http://www.trackmaniaunited.com) System information : - Tested both with XQuartz 2.6.0 beta (for Randr support) and stable version - Mac OS 10.6.5 Step to reproduce : - I downloaded the latest version of Trackmania Nation Forever (free) (http://www.trackmaniaunited.com) - The game installation run fine - I started a single player game, it will crash at the end of the loading process - I runned wineserver -k in a terminal to kill wine - I went to settings menu -> Advanced -> Audio - I unchecked the box "Enable sound" - I retried to start a single player race, and it worked perfectly (I retried several time and the problem seems to be linked to the sound) Other details - The menu works fine with - The problem does not exist on Linux -- Configure bugmail: http://bugs.winehq.org/userprefs.cgi?tab=email Do not reply to this email, post in Bugzilla using the above URL to reply. ------- You are receiving this mail because: ------- You are watching all bug changes.

3 14

[Bug 29633] New: Richedit hyperlinks limited to first line
by wine-bugs＠winehq.org April 26, 2026

April 26, 2026

http://bugs.winehq.org/show_bug.cgi?id=29633 Bug #: 29633 Summary: Richedit hyperlinks limited to first line Product: Wine Version: 1.2.2 Platform: x86 OS/Version: Linux Status: UNCONFIRMED Severity: normal Priority: P2 Component: richedit AssignedTo: wine-bugs(a)winehq.org ReportedBy: sdh_luc(a)hotmail.com Classification: Unclassified Created attachment 38396 --> http://bugs.winehq.org/attachment.cgi?id=38396 A broken location name with its last word repeated When hyperlinks in StarEdit's trigger sentences (as discussed in #4547) extend over multiple lines (either due to wrapping or because the linked text contains newlines), only the first is active. The others have the correct appearance and cursor but do nothing. (This is unfortunate if the first character is a newline!) Presumably related is that editing the multiline text replaces only the first line (see screenshots). -- Configure bugmail: http://bugs.winehq.org/userprefs.cgi?tab=email Do not reply to this email, post in Bugzilla using the above URL to reply. ------- You are receiving this mail because: ------- You are watching all bug changes.

3 22