{"id":"CVE-2026-112271","kind":"vulnerability","aliases":["CVE-2026-112271"],"related":[],"title":"libdisplay-info: heap out-of-bounds read in DisplayID parser crashes on crafted EDID","description":"libdisplay-info through 0.4.0 contains a heap out-of-bounds read vulnerability in the DisplayID v1 section parser in displayid.c that occurs when a data block's declared length exceeds the section. Attackers can supply a crafted EDID from a malicious monitor, KVM, capture device, or EDID file to make is_all_zeroes read past the buffer, causing a possible crash.","summary":"libdisplay-info through 0.4.0 has a heap out-of-bounds read in its DisplayID v1 section parser when a data block's declared length exceeds the section. A crafted EDID from a malicious monitor, KVM, capture device or EDID file can make the library read past its buffer and possibly crash.","severity":"medium","cvss":6.8,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["edid","infrastructure","libdisplay-info","linux-desktop"],"not_affected_if":[],"how_to_check":"- `unknown`","fix":"- unknown","status":"open","published_at":"2026-10-19T14:17:04+00:00","first_seen_at":"2026-10-23T21:57:18+00:00","triaged_at":"2026-10-25T03:44:52+00:00","updated_at":"2026-10-25T03:44:52+00:00","category":"infrastructure","confidence":0.6,"triage":{"at":"2026-10-25T03:44:52Z","model":"claude-haiku-5-5","output":{"fix":"- unknown","reach":"local","title":"libdisplay-info: heap out-of-bounds read in DisplayID parser crashes on crafted EDID","impact":"low","summary":"libdisplay-info through 0.4.0 has a heap out-of-bounds read in its DisplayID v1 section parser when a data block's declared length exceeds the section. A crafted EDID from a malicious monitor, KVM, capture device or EDID file can make the library read past its buffer and possibly crash.","category":"infrastructure","nicknames":[],"who_cares":["libdisplay-info","edid","linux-desktop"],"confidence":0.6,"needs_auth":"no","worst_case":"Parser reads past heap buffer, likely crashing the process","analyst_note":"Find the upstream fix version and affected distro packages for libdisplay-info; check the NVD entry and the upstream project for a patched release.","how_to_check":"- `unknown`","needs_analyst":true,"not_affected_if":[],"who_is_affected":"Systems that parse EDID data with libdisplay-info 0.4.0 or earlier, such as desktop compositors and display tools that read monitor EDID from attached hardware or files. The sources do not say which distributions or applications ship it, so whether a given host is exposed is unknown.","user_interaction":"unknown","needs_special_setup":"unknown","severity_if_unknown":"medium"},"cost_usd":0.000576,"input_tokens":3360,"output_tokens":480,"severity_before":"medium"},"analyst_status":null,"analyst_note":null,"search":"'-112271':19A,22A '-2026':18A,21A '0.4.0':35B,88C 'attack':118C 'block':53B,111C 'bound':8A,42B,95C 'buffer':80B,142C 'captur':68B,129C 'caus':143C 'contain':89C 'craft':15A,61B,122C 'crash':13A,83B,146C 'cve':17A,20A 'data':52B,110C 'declar':55B,113C 'desktop':30B 'devic':69B,130C 'displayid':11A,46B,100C 'displayid.c':105C 'edid':16A,23B,62B,71B,123C,132C 'exceed':57B,115C 'file':72B,133C 'heap':4A,38B,91C 'info':3A,27B,33B,86C 'infrastructur':24B 'kvm':67B,128C 'length':56B,114C 'libdisplay':2A,26B,32B,85C 'libdisplay-info':1A,25B,31B,84C 'librari':76B 'linux':29B 'linux-desktop':28B 'make':74B,135C 'malici':65B,126C 'monitor':66B,127C 'occur':107C 'out-of-bound':5A,39B,92C 'parser':12A,49B,103C 'past':78B,140C 'possibl':82B,145C 'read':9A,43B,77B,96C,139C 'section':48B,59B,102C,117C 'suppli':120C 'v1':47B,101C 'vulner':97C 'zero':138C","nicknames":[],"mitigations":[],"who_affected":"Systems that parse EDID data with libdisplay-info 0.4.0 or earlier, such as desktop compositors and display tools that read monitor EDID from attached hardware or files. The sources do not say which distributions or applications ship it, so whether a given host is exposed is unknown.","tier":"C","verified":{},"analyst_revisit_at":null,"first_public_at":"2026-10-19T14:17:04+00:00","kev":null,"cvss_vector":"CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","cvss_by":"disclosure@vulncheck.com","poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-112271","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-112271","severity":null,"published_at":"2026-10-19T14:17:04+00:00","modified_at":"2026-10-19T21:14:14+00:00","first_seen_at":"2026-10-23T21:57:18+00:00","fetched_at":"2026-10-23T22:28:57+00:00","note":null}],"documents":[],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}