Live › vulnerability › CVE-2026-112012
Go to dashboardlibtta, a library for decoding True Audio (TTA) files, does not reject a header declaring zero channels. A crafted .tta file therefore makes the decoder read and write outside a stack buffer, corrupting memory in any application that decodes it.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-23 21:57 UTC. All times on this page are UTC.
Applications that link libtta and decode .tta files supplied by users or other untrusted sources are exposed. Systems that never decode TTA input, or only decode files they created, have less reason to worry. The sources do not list fixed versions.
No product ranges from the sources yet.
Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
libtta through 2.3 contains a stack out-of-bounds read and write vulnerability in tta_decoder_process_stream() and tta_decoder_process_frame() because header checks never reject a zero channel count. Attackers can supply a crafted .tta file declaring zero channels so decorrelation accesses cache[-1] with stream-derived values, corrupting stack memory in decoding applications.
This page as .md · .json · in your agent: get_signal("CVE-2026-112012")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.