Is CVE-2026-112283 being exploited?

No public exploit is currently tracked.

How severe is CVE-2026-112283?

CVE-2026-112283 has a CVSS v3 severity of MEDIUM (5.5).

Back

CVE-2026-112283

Description

VideoLAN libbluray through 1.5.1 contains an uncontrolled memory allocation vulnerability in _parse_extent_start_points() in clpi_parse.c that trusts the num_point field without bounds checking. Attackers can supply a crafted .clpi file on a disc, image, or directory with a huge num_point to exhaust memory and CPU, causing denial of service.