CVE-2026-112058
Public on 2026-10-18
Modified on 2026-10-20
Description
A flaw was found in libdvdnav. An attacker could trigger a Denial of Service (DoS) by convincing a user to load a specially crafted DVD or disc image. Due to missing input validation in the set_PTT function, an invalid title number causes the library to read memory beyond allocated boundaries, leading to an application crash.
Severity
See what this means
CVSS v3 Base Score
See breakdown
Affected Packages
| Platform | Package | Release Date | Advisory | Status |
|---|---|---|---|---|
| Amazon Linux 2 - Core | libdvdnav | Pending Fix |
CVSS Scores
| Score Type | Score | Vector | |
|---|---|---|---|
| Amazon Linux | CVSSv3 | 5.5 | CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H |