PT-2026-116640 · Videolan · Libdvdnav
CVSS v3.1
5.5
Medium
| Vector | AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H |
libdvdnav before 7.0.0 contains a heap out-of-bounds read vulnerability in dvdnav describe title chapters that allows attackers to read beyond the part-of-title array by supplying an oversized vts ttn value. Attackers can provide a crafted DVD or disc image declaring a larger VMGI title vts ttn than the title set's entries to crash applications enumerating chapters.
Fix
Out of bounds Read
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Libdvdnav