CVE-2026-112271 Details
Description
libdisplay-info through 0.4.0 contains a heap out-of-bounds read vulnerability in the DisplayID v1 section parser in displayid.c that occurs when a data block's declared length exceeds the section. Attackers can supply a crafted EDID from a malicious monitor, KVM, capture device, or EDID file to make is_all_zeroes read past the buffer, causing a possible crash.
A heap out-of-bounds read vulnerability has been identified in libdisplay-info versions through 0.4.0. This issue arises in the DisplayID v1 section parser within displayid.c, where a data block's declared length can exceed the actual section length. Attackers may exploit this vulnerability by sending a crafted EDID from a malicious monitor, KVM, capture device, or EDID file. The exploitation causes the padding check function is_all_zeroes to read beyond the allocated buffer, potentially leading to a crash.
Users can update to libdisplay-info version 0.4.1 or later, where this vulnerability has been fixed. Instructions for updating can be found in the project's documentation.
Metrics
CVSS 4.0 Severity and Vector Strings:
VolerionCVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
Volerion
Assessed Oct 19, 2026CISA-ADP
Assessed Oct 19, 2026References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| https://hackmd.io/@haindpwn/cve-2026-112271-112272-libdisplay-info-displayid-datablock-overrun-oob-read | CISA-ADP | BundleExploitRemedyTechnical Analysis |
| https://gitlab.freedesktop.org/emersion/libdisplay-info | [email protected] | Permission RequiredVendor |
| https://gitlab.freedesktop.org/emersion/libdisplay-info/-/blob/0.4.0/displayid.c#L603-L689 | [email protected] | Permission RequiredSource CodeVendor |
| https://hackmd.io/@haindpwn/libdisplay-info-displayid-datablock-overrun-oob-read | [email protected] | BundleExploitRemedyTechnical Analysis |
| https://www.vulncheck.com/advisories/libdisplay-info-through-0.4.0-heap-out-of-bounds-read-via-displayid-v1-parser | [email protected] | AdvisoryBundleRemedy |
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| CWE-125 | Out-of-bounds Read | [email protected] |
Affected Products
| Product | Versions |
|---|---|
| libdisplay-info | <= 0.4.0 (semver) |
CPE
Remediation
| |
Change History
2 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Oct 19, 2026 | CVE Modified | CISA-ADP |
| Oct 19, 2026 | New CVE Received | [email protected] |