Integer Overflow Vulnerability in libtta by Gchudov
CVE-2026-112011
5.8MEDIUM
What is CVE-2026-112011?
The libtta library, up to version 2.3, features an integer overflow vulnerability within the tta_decoder_init_get_info function. This flaw can be exploited by malicious actors to cause a heap buffer overflow on 32-bit systems. By manipulating header fields in a crafted .tta file with a sample rate of 1 and an excessive samples value, attackers can trigger a wrap in the allocation of seek tables, potentially crashing applications that utilize the library.
Affected Version(s)
libtta 0 <= 2.3
References
CVSS V4
Score:
5.8
Severity:
MEDIUM
Confidentiality:
None
Integrity:
Low
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Attack Required:
Physical
Privileges Required:
Undefined
User Interaction:
Unknown
Timeline
- 🟡
Public PoC available
- 👾
Exploit known to exist
Vulnerability published
Vulnerability Reserved
Credit
HaiND from the Post and Telecommunication Institute of Technology