{"id":"CVE-2026-112282","kind":"vulnerability","aliases":["CVE-2026-112282"],"related":[],"title":"libbluray: crafted ClipInfo file causes out-of-bounds read and crash","description":"VideoLAN libbluray through 1.5.1 contains an out-of-bounds read vulnerability in clpi_access_point() that allows attackers to crash applications by supplying a ClipInfo file with an empty EP-map fine table. Attackers can place a crafted .clpi file in BDMV/CLIPINF with num_ep_fine set to zero and an unclamped ref_ep_fine_id, triggering reads during seeking for denial of service.","summary":"libbluray, the Blu-ray disc playback library, has an out-of-bounds read in clpi_access_point() when a .clpi file in BDMV/CLIPINF has an empty EP-map fine table. An attacker who supplies a crafted disc structure can crash the application that seeks within it, a denial of service.","severity":"medium","cvss":6.8,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["libbluray","media-playback","package","self-hosted","vlc"],"not_affected_if":["no-blu-ray-handling","trusted-media-only"],"how_to_check":"- Run `bd_get_version` or check the installed libbluray version with `pkg-config --modversion libbluray` and confirm whether it is `1.5.1` or earlier.\n- Find applications that link libbluray (for example VLC or mpv builds) on systems that open untrusted Blu-ray folders.","fix":null,"status":"open","published_at":"2026-10-19T14:17:06+00:00","first_seen_at":"2026-10-23T21:57:18+00:00","triaged_at":"2026-10-25T03:44:50+00:00","updated_at":"2026-10-25T03:44:50+00:00","category":"package","confidence":0.5,"triage":{"at":"2026-10-25T03:44:50Z","model":"claude-haiku-5-5","output":{"fix":"unknown","reach":"local","title":"libbluray: crafted ClipInfo file causes out-of-bounds read and crash","impact":"low","summary":"libbluray, the Blu-ray disc playback library, has an out-of-bounds read in clpi_access_point() when a .clpi file in BDMV/CLIPINF has an empty EP-map fine table. An attacker who supplies a crafted disc structure can crash the application that seeks within it, a denial of service.","category":"package","nicknames":[],"who_cares":["libbluray","media-playback","vlc","self-hosted"],"confidence":0.5,"needs_auth":"no","worst_case":"application crashes during seeking, causing denial of service","analyst_note":"Find the fixed libbluray release and the upstream commit for clpi_access_point() bounds checking; the NVD entry gives no patched version.","how_to_check":"- Run `bd_get_version` or check the installed libbluray version with `pkg-config --modversion libbluray` and confirm whether it is `1.5.1` or earlier.\n- Find applications that link libbluray (for example VLC or mpv builds) on systems that open untrusted Blu-ray folders.","needs_analyst":true,"not_affected_if":["no-blu-ray-handling","trusted-media-only"],"who_is_affected":"Systems that open untrusted Blu-ray disc images or folders with libbluray 1.5.1 or earlier, usually through a media player or transcoder that links the library. Teams that only play their own discs or do not handle Blu-ray content can skip it. The sources do not name a patched release.","user_interaction":"yes","needs_special_setup":"no","severity_if_unknown":"unknown"},"cost_usd":0.000629,"input_tokens":3376,"output_tokens":582,"severity_before":"medium"},"analyst_status":null,"analyst_note":null,"search":"'-112282':15A,18A '-2026':14A,17A '1.5.1':84C 'access':45B,95C 'allow':98C 'applic':72B,102C 'attack':62B,99C,116C 'bdmv/clipinf':52B,124C 'blu':31B 'blu-ray':30B 'bound':9A,41B,90C 'caus':5A 'clipinfo':3A,106C 'clpi':44B,49B,94C,121C 'contain':85C 'craft':2A,66B,120C 'crash':12A,70B,101C 'cve':13A,16A 'denial':78B,144C 'disc':33B,67B 'empti':55B,110C 'ep':57B,112C,127C,136C 'ep-map':56B,111C 'file':4A,50B,107C,122C 'fine':59B,114C,128C,137C 'host':26B 'id':138C 'libbluray':1A,19B,28B,82C 'librari':35B 'map':58B,113C 'media':21B 'media-playback':20B 'num':126C 'out-of-bound':6A,38B,87C 'packag':23B 'place':118C 'playback':22B,34B 'point':46B,96C 'ray':32B 'read':10A,42B,91C,140C 'ref':135C 'seek':74B,142C 'self':25B 'self-host':24B 'servic':80B,146C 'set':129C 'structur':68B 'suppli':64B,104C 'tabl':60B,115C 'trigger':139C 'unclamp':134C 'videolan':81C 'vlc':27B 'vulner':92C 'within':75B 'zero':131C","nicknames":[],"mitigations":[],"who_affected":"Systems that open untrusted Blu-ray disc images or folders with libbluray 1.5.1 or earlier, usually through a media player or transcoder that links the library. Teams that only play their own discs or do not handle Blu-ray content can skip it. The sources do not name a patched release.","tier":"C","verified":{},"analyst_revisit_at":null,"first_public_at":"2026-10-19T14:17:06+00:00","kev":null,"cvss_vector":"CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","cvss_by":"disclosure@vulncheck.com","poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-112282","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-112282","severity":null,"published_at":"2026-10-19T14:17:06+00:00","modified_at":"2026-10-19T21:13:39+00:00","first_seen_at":"2026-10-23T21:57:18+00:00","fetched_at":"2026-10-23T22:28:57+00:00","note":null}],"documents":[],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}