CVE-2026-112057

MediumCVSS 5.5

Published: 18/10/2026(UTC)Updated: 19/10/2026(UTC)Translated: 18/10/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.12%

2th percentile - higher than 2% of all known CVEs

Summary

libdvdnav before 7.0.0 contains a heap out-of-bounds read vulnerability in dvdnav_describe_title_chapters. Attackers can supply a crafted DVD or disc image with an oversized vts_ttn value, causing reads beyond the part-of-title array and crashing applications that enumerate chapters.

Risk Assessment

DVD playback applications using libdvdnav can be crashed by a crafted disc or image, resulting in denial of service. Memory disclosure from the process is also possible.

Recommendation

Update libdvdnav to version 7.0.0 or later. Until patched, avoid opening untrusted DVD images and discs in applications that use this library.

Other vulnerabilities in libdvdnav

CVE-2026-112058Medium
VideoLAN libdvdnav through 7.0.0 contains an out-of-bounds read in set_PTT that allows attackers to crash applications by supplying an invalid JumpTT title number checked only by an assert. Attackers can craft a DVD or disc image whose First Play program chain issues JumpTT with title 0 or an oversized number.

Original NVD description (English source)

libdvdnav before 7.0.0 contains a heap out-of-bounds read vulnerability in dvdnav_describe_title_chapters that allows attackers to read beyond the part-of-title array by supplying an oversized vts_ttn value. Attackers can provide a crafted DVD or disc image declaring a larger VMGI title vts_ttn than the title set's entries to crash applications enumerating chapters.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS