Bug 2555627 (CVE-2026-112283)
| Summary: | CVE-2026-112283 libbluray: libbluray: Denial of Service via uncontrolled memory allocation in clpi_parse | ||
|---|---|---|---|
| Product: | [Other] Security Response | Reporter: | OSIDB Bzimport <bzimport> |
| Component: | vulnerability | Assignee: | Product Security DevOps Team <prodsec-dev> |
| Status: | NEW --- | QA Contact: | |
| Severity: | medium | Docs Contact: | |
| Priority: | medium | ||
| Version: | unspecified | CC: | rhel-process-autobot, watson-tool-maintainers |
| Target Milestone: | --- | Keywords: | Security |
| Target Release: | --- | ||
| Hardware: | All | ||
| OS: | Linux | ||
| Whiteboard: | |||
| Fixed In Version: | Doc Type: | --- | |
| Doc Text: |
A flaw was found in libbluray. By supplying a specially crafted Clip Information (.clpi) file with an excessively large point value, an attacker can trigger uncontrolled memory and processor consumption during parsing. This issue can lead to system or application resource exhaustion, resulting in a Denial of Service (DoS).
|
Story Points: | --- |
| Clone Of: | Environment: | ||
| Last Closed: | Type: | --- | |
| Regression: | --- | Mount Type: | --- |
| Documentation: | --- | CRM: | |
| Verified Versions: | Category: | --- | |
| oVirt Team: | --- | RHEL 7.3 requirements from Atomic Host: | |
| Cloudforms Team: | --- | Target Upstream Version: | |
| Embargoed: | |||
| Bug Depends On: | 2556206, 2556207 | ||
| Bug Blocks: | |||
|
Description
OSIDB Bzimport
2026-10-19 14:34:57 UTC
|