CVE-2026-112283

VideoLAN libbluray versions through 1.5.1 are vulnerable to an uncontrolled memory allocation flaw within the _parse_extent_start_points() function in clpi_parse.c. The root cause is a lack of bounds checking on the num_point field. An attacker can provide a crafted .clpi file on a disc, image, o...