Heap Out-of-Bounds Read Vulnerability in libdvdnav from VideoLAN
CVE-2026-112057

6.8MEDIUM

Key Information:

Vendor

Videolan
Status
Libdvdnav
Vendor
CVE Published:
18 October 2026

What is CVE-2026-112057?

The libdvdnav library, utilized for DVD navigation, is vulnerable to a heap out-of-bounds read in the function dvdnav_describe_title_chapters. Attackers can exploit this issue by supplying a manipulated vts_ttn value larger than the existing title set entries on the disc. This can lead to crashes in applications that enumerate title chapters, which may allow attackers to glean sensitive information or disrupt service. It is crucial for users of libdvdnav before version 7.0.0 to update to the latest version to mitigate this vulnerability.

Affected Version(s)

libdvdnav 0 < 7.0.0

References

https://hackmd.io/@haindpwn/libdvdnav-navigation-index-oo...
third-party-advisory
https://code.videolan.org/videolan/libdvdnav/-/blob/6.1.1...
technical-description
https://code.videolan.org/videolan/libdvdnav/-/commit/1d2...
patch

CVSS V4

Score:
6.8
Severity:
MEDIUM
Confidentiality:
None
Integrity:
None
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
Unknown

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

HaiND from the Post and Telecommunication Institute of Technology
.