medium6.1
CVE-2026-112280
libaribb24 (aribb24) through 1.0.3 contains a heap-based buffer overflow vulnerability in src/parser.c that allows attackers to corrupt heap memory via an over…
Impact
libaribb24 (aribb24) through 1.0.3 contains a heap-based buffer overflow vulnerability in src/parser.c that allows attackers to corrupt heap memory via an oversized caption data unit. Attackers can supply a crafted caption PES packet in a media file or broadcast stream, processed through arib_parse_pes(), to crash FFmpeg or VLC and possibly corrupt further memory.
Affected products
| Product | Affected versions |
|---|---|
| Libaribb24 (Aribb24) | through 1.0.3 |
Versions were read from the advisory text. No structured product data has been published for this record yet.