CVE WATCH / VULNERABILITY DETAIL
CVE-2026-112283
MEDIUMCVSS 5.5NVD feed
Published 19 October 2026 · tracked since 20 October 2026
Description
VideoLAN libbluray through 1.5.1 contains an uncontrolled memory allocation vulnerability in _parse_extent_start_points() in clpi_parse.c that trusts the num_point field without bounds checking. Attackers can supply a crafted .clpi file on a disc, image, or directory with a huge num_point to exhaust
References
- NVD — National Vulnerability Database
- CVE.org record (MITRE)
- CISA Known Exploited Vulnerabilities catalog
Latest tracked vulnerabilities
- CVE-2026-107081
- CVE-2026-107567 HIGH 7.5
- CVE-2026-112328 MEDIUM 4.3
- CVE-2026-112329 MEDIUM 4.3
- CVE-2026-112150 HIGH 7.3
- CVE-2026-112151 HIGH 7.3
- CVE-2026-112149 HIGH 7.3
- CVE-2026-112291 MEDIUM 5.3
- CVE-2026-112271 MEDIUM 5.5
- CVE-2026-112272 MEDIUM 5.5