DTVコミュニティ fueruwakame@wakame_2012
CVE-2026-112280 https://www.cve.org/CVERecord?id=CVE-2026-112280 libaribb24 (1.0.3 以前) に、字幕データの処理時にヒープメモリを破壊するバッファオーバーフローの脆弱性。 細工された字幕データにより、FFmpeg や VLC がクラッシュしたり、メモリ破壊が発生したりする可能性がある
02063675
464 followersView on X
CVE-2026-112280
LOWCVSS 6.9 · MEDIUMSignal is active with 1 mentions in latest observed window
Immediate actions
- Track advisory updates for patch or workaround availability
Recommended action window: Monitor and triage in normal cycle
NVD description
libaribb24 (aribb24) through 1.0.3 contains a heap-based buffer overflow vulnerability in src/parser.c that allows attackers to corrupt heap memory via an oversized caption data unit. Attackers can supply a crafted caption PES packet in a media file or broadcast stream, processed through arib_parse_pes(), to crash FFmpeg or VLC and possibly corrupt further memory.
0.0/ 10 priority
Sources & remediation
Other references
Weakness type (CWE)
CWE-122
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
NONE
Threat summary
- 1 mentions across 1 observed day
What's happening
- 1 total mentions across 1 day
Deep dive
Activity timeline1 mentions / 1d
Referenced assets1 URL
By indicator