PT-2026-116617

libtta through 2.3 contains a divide-by-zero vulnerability in tta decoder init get info that allows attackers to crash applications by supplying an unvalidated zero sample rate. Attackers can craft a .tta file with a recomputed header CRC32 that triggers SIGFPE, crashing applications including th...

PT-2026-116616

libtta through 2.3 contains a stack out-of-bounds read and write vulnerability in tta decoder process stream and tta decoder process frame because header checks never reject a zero channel count. Attackers can supply a crafted .tta file declaring zero channels so decorrelation accesses cache-1 wi...

PT-2026-116615

libtta through 2.3 contains an integer overflow vulnerability in tta decoder init get info that allows attackers to cause a heap buffer overflow on 32-bit builds via unvalidated header fields. Attackers can supply a crafted .tta file with a sample rate of 1 and large samples value, wrapping the...

ffmpeg:ffmpeg_AV_CODEC_ID_TTA_fuzzer: Global-buffer-overflow in tta_decode_frame

Project: https://git.ffmpeg.org/ffmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=5629322560929792 Project: ffmpeg Fuzzing Engine: afl Fuzz Target: ffmpegAVCODECIDTTAfuzzer Job Type: aflasanffmpeg Platform Id: linux Crash Type: Global-buffer-overflow READ 4 Crash Address: 0x000000ad7d...