Live › vulnerability › CVE-2026-112058
Go to dashboardlibdvdnav through 7.0.0 has an out-of-bounds read in set_PTT, where an invalid JumpTT title number is checked only by an assert. A crafted DVD or disc image can make a player that uses libdvdnav crash.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-23 21:57 UTC. All times on this page are UTC.
Applications that link libdvdnav to play DVDs or disc images, such as media players, are exposed when they open untrusted discs or images. Systems that never open optical media or disc images with libdvdnav can skip it. The sources do not name specific fixed versions.
No product ranges from the sources yet.
Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
VideoLAN libdvdnav through 7.0.0 contains an out-of-bounds read vulnerability in set_PTT that allows attackers to crash applications by supplying an invalid JumpTT title number checked only by an assert. Attackers can craft a DVD or disc image whose First Play program chain issues JumpTT with title 0 or an oversized number, reading past the heap title table and crashing the player.
This page as .md · .json · in your agent: get_signal("CVE-2026-112058")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.