AZL-108566
See a problem?- Import Source
- https://github.com/microsoft/AzureLinuxVulnerabilityData/blob/main/osv/AZL-108566.json
- JSON Data
- https://api.osv.dev/v1/vulns/AZL-108566
- Upstream
- CVE-2026-112057
- Published
- 2026-10-18T13:16:38Z
- Modified
- 2026-10-19T14:17:05Z
- Summary
- CVE-2026-112057 affecting package libdvdnav 6.1.1-1
- Details
-
libdvdnav before 7.0.0 contains a heap out-of-bounds read vulnerability in dvdnav_describe_title_chapters that allows attackers to read beyond the part-of-title array by supplying an oversized vts_ttn value. Attackers can provide a crafted DVD or disc image declaring a larger VMGI title vts_ttn than the title set's entries to crash applications enumerating chapters.
- References