Live › vulnerability › CVE-2026-112284
Go to dashboardlibaribcaption, a library that decodes Japanese broadcast captions, reads past the end of an internal 78-entry table when a caption selects the Latin special character set. An attacker who supplies a crafted caption can leak adjacent read-only memory or crash the decoder.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-23 21:57 UTC. All times on this page are UTC.
Applications that embed libaribcaption to decode ARIB caption data from broadcast or transport streams, such as media players, recorders or transcoders. Exposure depends on whether untrusted caption input reaches the decoder; systems that never decode arbitrary broadcast captions can skip it.
No product ranges from the sources yet.
pkg-config --modversion libaribcaption or check the vendored copy's version in your build files, and look for 1.1.0 through 1.1.2.grep -ri libaribcaption in your build or lock files.1.1.2; the sources do not name the exact fixed version, so check the upstream project's release notes.Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
libaribcaption 1.1.0 through 1.1.2 contains a global out-of-bounds read in DecoderImpl::HandleGLGR() that reads past the 78-entry kLatinSpecialTable without an upper bound check. Attackers can supply crafted captions designating the Latin special set with ESC 28 4C followed by bytes 0x6F-0x7E to leak adjacent read-only data or crash decoding.
This page as .md · .json · in your agent: get_signal("CVE-2026-112284")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.