CVE-2026-112013 Details
Description
libtta through 2.3 contains a divide-by-zero vulnerability in tta_decoder_init_get_info() that allows attackers to crash applications by supplying an unvalidated zero sample rate. Attackers can craft a .tta file with a recomputed header CRC32 that triggers SIGFPE, crashing applications including the bundled tta console tool.
A divide-by-zero vulnerability has been identified in the libtta library, specifically in versions through 2.3. The issue arises within the TTA decoder initialization function, tta_decoder_init_get_info(). This function fails to properly validate the sample rate, allowing attackers to craft TTA files that, when processed, trigger a SIGFPE signal, causing applications to crash. The vulnerability can be exploited by manipulating the TTA file header to include a zero sample rate and a recomputed CRC32 checksum that bypasses integrity checks. This issue affects the libtta console tool and other applications using the library.
Users are advised to update to the latest version of libtta, where this vulnerability has been addressed. For those using the libtta-cpp SDK, ensure that the TTA decoder initialization functions include proper validation checks for the sample rate and channel count before processing TTA files.
Metrics
CVSS 4.0 Severity and Vector Strings:
VolerionCVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
Volerion
Assessed Oct 18, 2026CISA-ADP
Assessed Oct 19, 2026References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| https://github.com/gchudov/libtta | [email protected] | Source CodeVendor |
| https://github.com/gchudov/libtta/blob/af8dc48ce859e98842ab1a3eec98416d22a5199e/libtta.c#L602-L605 | [email protected] | Source CodeVendor |
| https://hackmd.io/@haindpwn/libtta-seek-table-count-overflow-oob-write | [email protected] | BundleExploitRemedyTechnical Analysis |
| https://sourceforge.net/projects/tta/ | [email protected] | ProductVendor |
| https://www.vulncheck.com/advisories/libtta-through-2.3-divide-by-zero-via-tta-decoder-init-get-info | [email protected] | Advisory |
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| CWE-369 | Divide By Zero | [email protected] |
Affected Products
| Product | Versions |
|---|---|
| libtta | <= 2.3 |
CPE
Remediation
| |
Change History
2 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Oct 19, 2026 | CVE Modified | CISA-ADP |
| Oct 18, 2026 | New CVE Received | [email protected] |