{"id":"DEBIAN-CVE-2026-112058","details":"VideoLAN libdvdnav through 7.0.0 contains an out-of-bounds read vulnerability in set_PTT that allows attackers to crash applications by supplying an invalid JumpTT title number checked only by an assert. Attackers can craft a DVD or disc image whose First Play program chain issues JumpTT with title 0 or an oversized number, reading past the heap title table and crashing the player.","modified":"2026-10-19T05:00:06.523583915Z","published":"2026-10-18T22:47:31.099355836Z","upstream":["CVE-2026-112058"],"references":[{"type":"ADVISORY","url":"https://security-tracker.debian.org/tracker/CVE-2026-112058"}],"affected":[{"package":{"name":"libdvdnav","ecosystem":"Debian:12","purl":"pkg:deb/debian/libdvdnav?arch=source&distro=bookworm"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["6.1.1-1","6.1.1-2","6.1.1-3","7.0.0-1","7.0.0-2"],"ecosystem_specific":{"urgency":"not yet assigned"},"database_specific":{"source":"https://storage.googleapis.com/debian-osv/debian-cve-osv/DEBIAN-CVE-2026-112058.json"}},{"package":{"name":"libdvdnav","ecosystem":"Debian:13","purl":"pkg:deb/debian/libdvdnav?arch=source&distro=trixie"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["6.1.1-3","7.0.0-1","7.0.0-2"],"ecosystem_specific":{"urgency":"not yet assigned"},"database_specific":{"source":"https://storage.googleapis.com/debian-osv/debian-cve-osv/DEBIAN-CVE-2026-112058.json"}},{"package":{"name":"libdvdnav","ecosystem":"Debian:14","purl":"pkg:deb/debian/libdvdnav?arch=source&distro=forky"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["6.1.1-3","7.0.0-1","7.0.0-2"],"ecosystem_specific":{"urgency":"not yet assigned"},"database_specific":{"source":"https://storage.googleapis.com/debian-osv/debian-cve-osv/DEBIAN-CVE-2026-112058.json"}}],"schema_version":"1.9.0"}