CVE-2026-112280
Received Received - Intake

Heap-based Buffer Overflow in libaribb24

Publication date: 2026-10-19

Last updated on: 2026-10-19

Assigner: VulnCheck

Description
libaribb24 (aribb24) through 1.0.3 contains a heap-based buffer overflow vulnerability in src/parser.c that allows attackers to corrupt heap memory via an oversized caption data unit. Attackers can supply a crafted caption PES packet in a media file or broadcast stream, processed through arib_parse_pes(), to crash FFmpeg or VLC and possibly corrupt further memory.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-10-19
Last Modified
2026-10-19
Generated
2026-10-19
AI Q&A
2026-10-19
EPSS Evaluated
N/A
NVD
CVE-2026-112280
EUVD
EUVD-2026-104293

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
nkoriyama aribb24 0

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-122 A heap overflow condition is a buffer overflow, where the buffer that can be overwritten is allocated in the heap portion of memory, generally meaning that the buffer was allocated using a routine such as malloc().

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

libaribb24 through version 1.0.3 has a heap-based buffer overflow in src/parser.c. Attackers can exploit this by providing oversized caption data units, causing memory corruption when processed via arib_parse_pes(). This can lead to crashes in applications like FFmpeg or VLC and potentially further memory corruption.

Detection Guidance

Detecting this vulnerability requires checking for outdated versions of libaribb24 (aribb24) through 1.0.3. Inspect installed packages using commands like 'dpkg -l | grep aribb24' on Debian-based systems or 'rpm -qa | grep aribb24' on RPM-based systems. Review media processing applications like FFmpeg or VLC for crashes when handling caption PES packets.

Impact Analysis

If you use software that relies on libaribb24 (e.g., FFmpeg or VLC) to process media files or streams with caption data, an attacker could craft a malicious file or stream to crash your application or corrupt memory. This may lead to denial-of-service or potential code execution on your system.

Compliance Impact

This vulnerability could impact compliance with GDPR and HIPAA by enabling memory corruption attacks that may lead to unauthorized data access, modification, or denial of service in systems processing ARIB subtitle streams. Exploitation could compromise the integrity and availability of media processing applications, potentially violating data protection requirements under these regulations.

Mitigation Strategies

Immediately update libaribb24 to a patched version beyond 1.0.3. If updates are unavailable, disable caption processing in affected applications like FFmpeg or VLC by removing or restricting access to caption-related features. Monitor media streams for malformed PES packets that may trigger the overflow.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-112280. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart