Approved changes feed: RSS · Atom
cpe:2.3:a:true_audio:libtta:*:*:*:*:*:*:*:*part: a version: * update: *
| Vendor | True Audio (86c52bc1-277d-5033-9eb8-eeb68398472e) |
|---|---|
| Product | Libtta (7e131019-2ae5-50c4-877f-1ba719655dc2) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from gcve-enriched-dumps CVE data
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-112011 |
vulnerable | 2026-11-03 10:16:28.934650 |
libtta through 2.3 Integer Overflow via tta_decoder_init_get_info Seek Table
MEDIUM (5.3)
libtta through 2.3 contains an integer overflow vulnerability in tta_decoder_init_get_info() that allows attackers to cause a heap buffer overflow on 32-bit builds via unvalidated header fields. Attackers can supply a crafted .tta file with a sample rate of 1 and large samples value, wrapping the seek table allocation and crashing applications.
Published: 2026-10-18T11:38:33.369Z
Updated: 2026-10-19T16:01:06.785Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-112012 |
vulnerable | 2026-11-03 10:16:28.329672 |
libtta through 2.3 Stack Out-of-Bounds Write via Zero Channel Count
MEDIUM (5.3)
libtta through 2.3 contains a stack out-of-bounds read and write vulnerability in tta_decoder_process_stream() and tta_decoder_process_frame() because header checks never reject a zero channel count. Attackers can supply a crafted .tta file declaring zero channels so decorrelation accesses cache[-1] with stream-derived values, corrupting stack memory in decoding applications.
Published: 2026-10-18T11:38:34.029Z
Updated: 2026-10-19T16:38:35.225Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-112013 |
vulnerable | 2026-11-03 10:16:28.218014 |
libtta through 2.3 Divide by Zero via tta_decoder_init_get_info
MEDIUM (5.5)
libtta through 2.3 contains a divide-by-zero vulnerability in tta_decoder_init_get_info() that allows attackers to crash applications by supplying an unvalidated zero sample rate. Attackers can craft a .tta file with a recomputed header CRC32 that triggers SIGFPE, crashing applications including the bundled tta console tool.
Published: 2026-10-18T11:38:34.718Z
Updated: 2026-10-19T18:37:55.900Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.