Live › vulnerability › CVE-2026-112057
Go to dashboardlibdvdnav before 7.0.0 has a heap out-of-bounds read in dvdnav_describe_title_chapters, reached through an oversized vts_ttn value in the disc's title table. A crafted DVD or disc image can make an application that enumerates chapters read past a heap array, which crashes it.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-23 21:57 UTC. All times on this page are UTC.
Applications that open DVD or disc images with libdvdnav and call chapter enumeration such as dvdnav_describe_title_chapters, for example media players and disc rippers. Systems that never process DVD or disc images with libdvdnav can skip it.
No product ranges from the sources yet.
pkg-config --modversion dvdnav or the package manager's query for libdvdnavldd on the binary and look for libdvdnav.so7.0.0 or laterEach row is the first time that source carried this signal. The analyst’s rows are its own findings.
libdvdnav before 7.0.0 contains a heap out-of-bounds read vulnerability in dvdnav_describe_title_chapters that allows attackers to read beyond the part-of-title array by supplying an oversized vts_ttn value. Attackers can provide a crafted DVD or disc image declaring a larger VMGI title vts_ttn than the title set's entries to crash applications enumerating chapters.
This page as .md · .json · in your agent: get_signal("CVE-2026-112057")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.