aribb24 vulnerabilities
CVEs whose affected-version data names the aribb24 package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.
2 CVEsRSS
CVE-2026-112280Medium· 6.1libaribb24 (aribb24) through 1.0.3 Heap Buffer Overflow via parse_data_unit_statement_body
libaribb24 (aribb24) through 1.0.3 contains a heap-based buffer overflow vulnerability in src/parser.c that allows attackers to corrupt heap memory via an oversized caption data unit. Attackers can supply a crafted caption PES packet in …
▾ Sunlitnkoriyama · aribb24via CVEORG
CVE-2026-112281Medium· 6.1PoClibaribb24 through 1.0.3 Stack Buffer Overflow via decoder_handle_csi
libaribb24 (aribb24) through 1.0.3 contains a stack-based buffer overflow vulnerability in decoder_handle_csi() in src/decoder.c that allows attackers to write past a fixed 256-entry array by supplying unbounded CSI parameter bytes. Atta…
▾ Twilightnkoriyama · aribb24via CVEORG