CVE-2026-112282

VideoLAN libbluray through 1.5.1 contains an out-of-bounds read vulnerability in clpiaccesspoint that allows attackers to crash applications by supplying a ClipInfo file with an empty EP-map fine table. Attackers can place a crafted .clpi file in BDMV/CLIPINF with numepfine set to zero and an...

CVE-2026-112283

VideoLAN libbluray through 1.5.1 contains an uncontrolled memory allocation vulnerability in parseextentstartpoints in clpiparse.c that trusts the numpoint field without bounds checking. Attackers can supply a crafted .clpi file on a disc, image, or directory with a huge numpoint to exhaust memor...

CVE-2026-112282 VideoLAN libbluray through 1.5.1 Out-of-Bounds Read via clpi_access_point

VideoLAN libbluray through 1.5.1 contains an out-of-bounds read vulnerability in clpiaccesspoint that allows attackers to crash applications by supplying a ClipInfo file with an empty EP-map fine table. Attackers can place a crafted .clpi file in BDMV/CLIPINF with numepfine set to zero and an...

CVE-2026-112282

VideoLAN libbluray versions through 1.5.1 are susceptible to an out-of-bounds read vulnerability within the clpi_access_point() function. An attacker can trigger a denial of service by crashing the application by providing a crafted .clpi file in the BDMV/CLIPINF directory. The vulnerability occu...

CVE-2026-112283

VideoLAN libbluray versions through 1.5.1 are vulnerable to an uncontrolled memory allocation flaw within the _parse_extent_start_points() function in clpi_parse.c. The root cause is a lack of bounds checking on the num_point field. An attacker can provide a crafted .clpi file on a disc, image, o...

EUVD-2026-104290

VideoLAN libbluray through 1.5.1 contains an uncontrolled memory allocation vulnerability in parseextentstartpoints in clpiparse.c that trusts the numpoint field without bounds checking. Attackers can supply a crafted .clpi file on a disc, image, or directory with a huge numpoint to exhaust memor...

EUVD-2026-104291

VideoLAN libbluray through 1.5.1 contains an out-of-bounds read vulnerability in clpiaccesspoint that allows attackers to crash applications by supplying a ClipInfo file with an empty EP-map fine table. Attackers can place a crafted .clpi file in BDMV/CLIPINF with numepfine set to zero and an...

CVE-2026-112282

VideoLAN libbluray through 1.5.1 contains an out-of-bounds read vulnerability in clpiaccesspoint that allows attackers to crash applications by supplying a ClipInfo file with an empty EP-map fine table. Attackers can place a crafted .clpi file in BDMV/CLIPINF with numepfine set to zero and an...

CVE-2026-112283

VideoLAN libbluray through 1.5.1 contains an uncontrolled memory allocation vulnerability in parseextentstartpoints in clpiparse.c that trusts the numpoint field without bounds checking. Attackers can supply a crafted .clpi file on a disc, image, or directory with a huge numpoint to exhaust memor...

CVE-2026-112283 libbluray through 1.5.1 Uncontrolled Memory Allocation via _parse_extent_start_points

VideoLAN libbluray through 1.5.1 contains an uncontrolled memory allocation vulnerability in parseextentstartpoints in clpiparse.c that trusts the numpoint field without bounds checking. Attackers can supply a crafted .clpi file on a disc, image, or directory with a huge numpoint to exhaust memor...

PT-2026-117426

VideoLAN libbluray through 1.5.1 contains an out-of-bounds read vulnerability in clpi access point that allows attackers to crash applications by supplying a ClipInfo file with an empty EP-map fine table. Attackers can place a crafted .clpi file in BDMV/CLIPINF with num ep fine set to zero and an...

PT-2026-117427

VideoLAN libbluray through 1.5.1 contains an uncontrolled memory allocation vulnerability in parse extent start points in clpi parse.c that trusts the num point field without bounds checking. Attackers can supply a crafted .clpi file on a disc, image, or directory with a huge num point to exhaust...