CVE-2026-112058

MediumCVSS 5.5

Published: 18/10/2026(UTC)Updated: 19/10/2026(UTC)Translated: 18/10/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.12%

2th percentile - higher than 2% of all known CVEs

Summary

VideoLAN libdvdnav through 7.0.0 contains an out-of-bounds read in set_PTT that allows attackers to crash applications by supplying an invalid JumpTT title number checked only by an assert. Attackers can craft a DVD or disc image whose First Play program chain issues JumpTT with title 0 or an oversized number.

Risk Assessment

An attacker can remotely crash the player by reading past the heap title table, potentially enabling a denial-of-service attack. The risk affects applications using libdvdnav to play DVDs.

Recommendation

Upgrade libdvdnav to a version newer than 7.0.0 as soon as a fix is available. Until then, avoid playing untrusted DVDs and disc images.

Other vulnerabilities in libdvdnav

CVE-2026-112057Medium
libdvdnav before 7.0.0 contains a heap out-of-bounds read vulnerability in dvdnav_describe_title_chapters. Attackers can supply a crafted DVD or disc image with an oversized vts_ttn value, causing reads beyond the part-of-title array and crashing applications that enumerate chapters.

Original NVD description (English source)

VideoLAN libdvdnav through 7.0.0 contains an out-of-bounds read vulnerability in set_PTT that allows attackers to crash applications by supplying an invalid JumpTT title number checked only by an assert. Attackers can craft a DVD or disc image whose First Play program chain issues JumpTT with title 0 or an oversized number, reading past the heap title table and crashing the player.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS