Approved changes feed: RSS · Atom

cpe:2.3:a:videolan:libdvdnav:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorVideolan (b1ef3618-afd2-52df-be05-50fdbdda8d58)
ProductLibdvdnav (41bb004e-5682-5ff2-a60b-4a8a7ef06838)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-112057 vulnerable 2026-11-03 10:16:28.588888 libdvdnav before 7.0.0 Out-of-Bounds Read in dvdnav_describe_title_chapters
MEDIUM (5.5)
libdvdnav before 7.0.0 contains a heap out-of-bounds read vulnerability in dvdnav_describe_title_chapters that allows attackers to read beyond the part-of-title array by supplying an oversized vts_ttn value. Attackers can provide a crafted DVD or disc image declaring a larger VMGI title vts_ttn than the title set's entries to crash applications enumerating chapters.
Published: 2026-10-18T12:19:48.021Z
Updated: 2026-10-19T17:58:02.002Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-112058 vulnerable 2026-11-03 10:16:28.223135 libdvdnav through 7.0.0 Out-of-Bounds Read via set_PTT JumpTT
MEDIUM (5.5)
VideoLAN libdvdnav through 7.0.0 contains an out-of-bounds read vulnerability in set_PTT that allows attackers to crash applications by supplying an invalid JumpTT title number checked only by an assert. Attackers can craft a DVD or disc image whose First Play program chain issues JumpTT with title 0 or an oversized number, reading past the heap title table and crashing the player.
Published: 2026-10-18T12:19:48.829Z
Updated: 2026-10-19T20:30:01.860Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.