Live › vulnerability › CVE-2026-112011
Go to dashboardlibtta is a library for decoding TTA audio files, and through version 2.3 its decoder computes a seek table allocation from unchecked header fields that can wrap around. An attacker who supplies a crafted .tta file can cause a heap buffer overflow that crashes the application and may allow more.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-23 21:57 UTC. All times on this page are UTC.
Applications that decode untrusted .tta files with libtta 2.3 or earlier, built for 32-bit targets, are exposed. Systems that never parse TTA audio from outside sources, or that run 64-bit builds only, are less likely to be affected; the sources do not confirm the 64-bit case.
No product ranges from the sources yet.
Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
libtta through 2.3 contains an integer overflow vulnerability in tta_decoder_init_get_info() that allows attackers to cause a heap buffer overflow on 32-bit builds via unvalidated header fields. Attackers can supply a crafted .tta file with a sample rate of 1 and large samples value, wrapping the seek table allocation and crashing applications.
This page as .md · .json · in your agent: get_signal("CVE-2026-112011")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.