medium5.5
CVE-2026-112282
VideoLAN libbluray through 1.5.1 contains an out-of-bounds read vulnerability in clpi_access_point() that allows attackers to crash applications by supplying a…
Impact
VideoLAN libbluray through 1.5.1 contains an out-of-bounds read vulnerability in clpi_access_point() that allows attackers to crash applications by supplying a ClipInfo file with an empty EP-map fine table. Attackers can place a crafted .clpi file in BDMV/CLIPINF with num_ep_fine set to zero and an unclamped ref_ep_fine_id, triggering reads during seeking for denial of service.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| VideoLAN | VideoLAN Libbluray | through 1.5.1 |
Versions were read from the advisory text. No structured product data has been published for this record yet.