PT-2026-117426 · Videolan · Libbluray
CVSS v3.1
5.5
Medium
| Vector | AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H |
VideoLAN libbluray through 1.5.1 contains an out-of-bounds read vulnerability in clpi access point() that allows attackers to crash applications by supplying a ClipInfo file with an empty EP-map fine table. Attackers can place a crafted .clpi file in BDMV/CLIPINF with num ep fine set to zero and an unclamped ref ep fine id, triggering reads during seeking for denial of service.
Fix
Out of bounds Read
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Libbluray