CVE-2026-112058

A flaw was found in libdvdnav. An attacker could trigger a Denial of Service DoS by convincing a user to load a specially crafted DVD or disc image. Due to missing input validation in the setPTT function, an invalid title number causes the library to read memory beyond allocated boundaries, leadi...

CVE-2026-112057

A flaw was found in libdvdnav. This vulnerability allows an attacker to cause a Denial of Service DoS by tricking a user into opening a specially crafted DVD or disc image. When the library parses chapters from a disc declaring an oversized title index, it performs an out-of-bounds read beyond...

EUVD-2026-103520

VideoLAN libdvdnav through 7.0.0 contains an out-of-bounds read vulnerability in setPTT that allows attackers to crash applications by supplying an invalid JumpTT title number checked only by an assert. Attackers can craft a DVD or disc image whose First Play program chain issues JumpTT with titl...

CVE-2026-112058

VideoLAN libdvdnav through 7.0.0 contains an out-of-bounds read vulnerability in setPTT that allows attackers to crash applications by supplying an invalid JumpTT title number checked only by an assert. Attackers can craft a DVD or disc image whose First Play program chain issues JumpTT with titl...

CVE-2026-112057

libdvdnav before 7.0.0 contains a heap out-of-bounds read vulnerability in dvdnavdescribetitlechapters that allows attackers to read beyond the part-of-title array by supplying an oversized vtsttn value. Attackers can provide a crafted DVD or disc image declaring a larger VMGI title vtsttn than t...

CVE-2026-112057 libdvdnav before 7.0.0 Out-of-Bounds Read in dvdnav_describe_title_chapters

libdvdnav before 7.0.0 contains a heap out-of-bounds read vulnerability in dvdnavdescribetitlechapters that allows attackers to read beyond the part-of-title array by supplying an oversized vtsttn value. Attackers can provide a crafted DVD or disc image declaring a larger VMGI title vtsttn than t...

EUVD-2026-103519

libdvdnav before 7.0.0 contains a heap out-of-bounds read vulnerability in dvdnavdescribetitlechapters that allows attackers to read beyond the part-of-title array by supplying an oversized vtsttn value. Attackers can provide a crafted DVD or disc image declaring a larger VMGI title vtsttn than t...

CVE-2026-112058

The VideoLAN libdvdnav library through version 7.0.0 is vulnerable to an out-of-bounds read in the set_PTT function. The root cause is a lack of proper input validation where the library relies on an assert to check the JumpTT title number. An attacker can crash an application (Denial of Service)...

CVE-2026-112057

The libdvdnav library (versions before 7.0.0 ) is vulnerable to a heap out-of-bounds read in the dvdnav_describe_title_chapters function. The root cause is the processing of an oversized vts_ttn value, which allows the application to read beyond the part-of-title array. An attacker can exploit th...

CVE-2026-112058 libdvdnav through 7.0.0 Out-of-Bounds Read via set_PTT JumpTT

VideoLAN libdvdnav through 7.0.0 contains an out-of-bounds read vulnerability in setPTT that allows attackers to crash applications by supplying an invalid JumpTT title number checked only by an assert. Attackers can craft a DVD or disc image whose First Play program chain issues JumpTT with titl...

new packages: libdvdnav

An update is available for libdvdnav. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list For detailed information on changes in this release, see the Rocky Enterpri...