CCExtractor up to 183 MPEG-TS File Parser src/lib_ccx/ts_tables.c parse_PAT/parse_PMT out-of-bounds

Summaryinfo

A vulnerability has been found in CCExtractor up to 183 and classified as problematic. This impacts the function parse_PAT/parse_PMT in the library src/lib_ccx/ts_tables.c of the component MPEG-TS File Parser. Performing a manipulation results in out-of-bounds. This vulnerability is identified as CVE-2026-2245. The attack is only possible with local access. Additionally, an exploit exists. It is recommended to apply a patch to fix this issue.

Detailsinfo

A vulnerability, which was classified as problematic, was found in CCExtractor up to 183. This affects the function parse_PAT/parse_PMT in the library src/lib_ccx/ts_tables.c of the component MPEG-TS File Parser. The manipulation with an unknown input leads to a out-of-bounds vulnerability. CWE is classifying the issue as CWE-125. The product reads data past the end, or before the beginning, of the intended buffer. This is going to have an impact on availability.

It is possible to read the advisory at github.com. This vulnerability is uniquely identified as CVE-2026-2245. The exploitability is told to be easy. Attacking locally is a requirement. Technical details and a public exploit are known.

The exploit is shared for download at github.com. It is declared as proof-of-concept. The vulnerability scanner Nessus provides a plugin with the ID 298458 (Linux Distros Unpatched Vulnerability : CVE-2026-2245), which helps to determine the existence of the flaw in a target environment.

Applying the patch fd7271bae238ccb3ae8a71304ea64f0886324925 is able to eliminate this problem. The bugfix is ready for download at github.com.

The vulnerability is also documented in the vulnerability database at Tenable (298458). Be aware that VulDB is the high quality source for vulnerability data.

Productinfo

Name

• CCExtractor

Version

• 183

License

• open-source

Website

• Product: https://github.com/CCExtractor/ccextractor/

CPE 2.3info

• 🔒

CPE 2.2info

• 🔒

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

Submitinfo

Accepted

• Submit #753159: CCExtractor ccextractor c65fb08 Heap-based Buffer Overflow (by Oneafter)

Duplicate

• Submit #XXXXXX: Xxxxxxxxxxx Xxxxxxxxxxx Xxxxxxx Xxxx-xxxxx Xxxxxx Xxxxxxxx (by Oneafter)

Be aware that VulDB is the high quality source for vulnerability data.

Discussion