Approved changes feed: RSS · Atom
cpe:2.3:a:videolan:libbluray:*:*:*:*:*:*:*:*part: a version: * update: *
| Vendor | Videolan (b1ef3618-afd2-52df-be05-50fdbdda8d58) |
|---|---|
| Product | Libbluray (69e113a2-01b8-516a-bb60-c09ea1459ea3) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from purl2cpe mapping
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:deb/debian/libbluray |
purl2cpe | 2026-06-01 10:16:43.543992 |
pkg:deb/ubuntu/libbluray |
purl2cpe | 2026-06-01 10:16:43.543995 |
pkg:github/ace20022/libbluray |
purl2cpe | 2026-06-01 10:16:43.543998 |
pkg:github/koying/libbluray |
purl2cpe | 2026-06-01 10:16:43.544001 |
pkg:gitlab/redhat/libbluray |
purl2cpe | 2026-06-01 10:16:43.544004 |
pkg:rpm/centos/libbluray |
purl2cpe | 2026-06-01 10:16:43.544007 |
pkg:rpm/fedora/libbluray |
purl2cpe | 2026-06-01 10:16:43.544009 |
pkg:rpm/opensuse/libbluray |
purl2cpe | 2026-06-01 10:16:43.544012 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-112282 |
vulnerable | 2026-11-03 10:16:28.860265 | db.gcve.eu details are currently unavailable. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-112283 |
vulnerable | 2026-11-03 10:16:28.632033 |
libbluray through 1.5.1 Uncontrolled Memory Allocation via _parse_extent_start_points
MEDIUM (5.5)
VideoLAN libbluray through 1.5.1 contains an uncontrolled memory allocation vulnerability in _parse_extent_start_points() in clpi_parse.c that trusts the num_point field without bounds checking. Attackers can supply a crafted .clpi file on a disc, image, or directory with a huge num_point to exhaust memory and CPU, causing denial of service.
Published: 2026-10-19T13:55:27.741Z
Updated: 2026-10-22T02:53:35.556Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2015-7810 |
vulnerable | 2026-06-08 05:07:01.988944 |
Details available
libbluray MountManager class has a time-of-check time-of-use (TOCTOU) race when expanding JAR files
Published: 2019-11-22T14:23:51.000Z
Updated: 2024-08-06T07:58:59.892Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.