Copyright © 2012 Red Hat, Inc. All rights reserved. Moderate 2026-10-19T13:55:27 libbluray: libbluray: Denial of Service via out-of-bounds read in clpi_access_point() 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H CWE-125

VideoLAN libbluray through 1.5.1 contains an out-of-bounds read vulnerability in clpi_access_point() that allows attackers to crash applications by supplying a ClipInfo file with an empty EP-map fine table. Attackers can place a crafted .clpi file in BDMV/CLIPINF with num_ep_fine set to zero and an unclamped ref_ep_fine_id, triggering reads during seeking for denial of service.

A flaw was found in libbluray. This vulnerability allows an attacker to cause a Denial of Service (DoS) through an application crash when processing a specially crafted ClipInfo (.clpi) file. By supplying a file with an empty entry point map fine table, an out-of-bounds read is triggered during playback seek operations in the clpi_access_point() function.

Avoid opening or processing Blu-ray media images, BDMV directories, or ClipInfo (.clpi) files from untrusted sources. If Blu-ray playback capabilities are not needed, remove the libbluray package: # dnf remove libbluray Warning: Removing libbluray may remove dependent media players or related graphical utilities. Verify the transaction summary before confirming package removal. Systems remain usable via terminal. Red Hat Enterprise Linux 7 Fix deferred libbluray Red Hat Enterprise Linux 8 Fix deferred libbluray https://www.cve.org/CVERecord?id=CVE-2026-112282 https://nvd.nist.gov/vuln/detail/CVE-2026-112282 https://code.videolan.org/videolan/libbluray/-/blob/1.5.1/src/libbluray/bdnav/clpi_parse.c https://hackmd.io/@haindpwn/libbluray-clpi-ep-map-oob-read https://www.vulncheck.com/advisories/videolan-libbluray-through-1.5.1-out-of-bounds-read-via-clpi-access-point