CVE-2026-112011 Details
Description
libtta through 2.3 contains an integer overflow vulnerability in tta_decoder_init_get_info() that allows attackers to cause a heap buffer overflow on 32-bit builds via unvalidated header fields. Attackers can supply a crafted .tta file with a sample rate of 1 and large samples value, wrapping the seek table allocation and crashing applications.
A heap buffer overflow vulnerability has been identified in libtta versions through 2.3. The issue arises in the function tta_decoder_init_get_info(), where unvalidated header fields allow for an integer overflow. This vulnerability is particularly concerning in 32-bit builds, where an attacker can craft a .tta file with a sample rate of 1 and a large sample value. The resulting overflow wraps the allocation for the seek table, leading to a heap out-of-bounds write and potentially crashing applications.
Users are advised to update to version 2.3 or later, where this vulnerability has been addressed.
Metrics
CVSS 4.0 Severity and Vector Strings:
VolerionCVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
Volerion
Assessed Oct 18, 2026CISA-ADP
Assessed Oct 19, 2026References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| CWE-190 | Integer Overflow or Wraparound | [email protected] |
Affected Products
| Product | Versions |
|---|---|
| libtta | <= 2.3 |
CPE
Remediation
| |
| libtta-cpp | <= 2.3 |
CPE
Remediation
| |
Change History
2 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Oct 19, 2026 | CVE Modified | CISA-ADP |
| Oct 18, 2026 | New CVE Received | [email protected] |