Description
VideoLAN libbluray through 1.5.1 contains an uncontrolled memory allocation vulnerability in _parse_extent_start_points() in clpi_parse.c that trusts the num_point field without bounds checking. Attackers can supply a crafted .clpi file on a disc, image, or directory with a huge num_point to exhaust memory and CPU, causing denial of service.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
VideoLAN libbluray
Default version status: unaffected
0 to ≤ 1.5.1affected
References
- https://hackmd.io/@haindpwn/libbluray-clpi-ep-map-oob-read ↗
- https://code.videolan.org/videolan/libbluray/-/blob/1.5.1/src/libbluray/bdnav/clpi_parse.c ↗
- https://www.vulncheck.com/advisories/libbluray-through-1.5.1-uncontrolled-memory-allocation-via-parse-extent-start-points ↗
- https://hackmd.io/@haindpwn/cve-2026-112282-112283-libbluray-clpi-ep-map-oob-read ↗