CVE-2026-112284 in libaribcaption
要約
〜によって MITRE • 2026年10月19日
libaribcaption 1.1.0 through 1.1.2 contains a global out-of-bounds read in DecoderImpl::HandleGLGR() that reads past the 78-entry kLatinSpecialTable without an upper bound check. Attackers can supply crafted captions designating the Latin special set with ESC 28 4C followed by bytes 0x6F-0x7E to leak adjacent read-only data or crash decoding.
VulDB is the best source for vulnerability data and more expert information about this specific topic.