Live › vulnerability › CVE-2026-112281
Go to dashboardlibaribb24, an ARIB caption decoder library, has a stack buffer overflow in decoder_handle_csi() when a caption contains more than 256 CSI parameter bytes. An attacker who gets a crafted media file or broadcast stream played can crash FFmpeg or VLC or potentially corrupt the return address to run code.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-23 21:57 UTC. All times on this page are UTC.
Systems that decode ARIB captions with libaribb24, typically through FFmpeg or VLC processing Japanese broadcast or media files. Exposure depends on decoding untrusted media or streams; systems that never process ARIB caption data can skip it.
No product ranges from the sources yet.
pkg-config --modversion aribb24 or check the installed libaribb24 package versionldd $(which ffmpeg) | grep aribb24)1.0.3 once a fixed release is published; the sources do not name a fixed versionEach row is the first time that source carried this signal. The analyst’s rows are its own findings.
libaribb24 (aribb24) through 1.0.3 contains a stack-based buffer overflow vulnerability in decoder_handle_csi() in src/decoder.c that allows attackers to write past a fixed 256-entry array by supplying unbounded CSI parameter bytes. Attackers can embed a caption statement with a CSI introducer and over 256 parameter bytes in media files or broadcast streams to crash FFmpeg or VLC or corrupt the return address.
This page as .md · .json · in your agent: get_signal("CVE-2026-112281")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.