CVE-2026-112013
MEDIUM
6,8
Source: [email protected]
Attack Vector: local
Attack Complexity: low
Privileges Required: none
User Interaction: passive
Confidentiality: N/A
Integrity: N/A
Availability: N/A
MEDIUM
5,5
Source: [email protected]
Attack Vector: local
Attack Complexity: low
Privileges Required: none
User Interaction: required
Scope: unchanged
Confidentiality: none
Integrity: none
Availability: high
Description
AI Translation Available
libtta through 2.3 contains a divide-by-zero vulnerability in tta_decoder_init_get_info() that allows attackers to crash applications by supplying an unvalidated zero sample rate. Attackers can craft a .tta file with a recomputed header CRC32 that triggers SIGFPE, crashing applications including the bundled tta console tool.
EPSS (Exploit Prediction Scoring System)
Trend Analysis
EPSS (Exploit Prediction Scoring System)
Prevede la probabilità di sfruttamento basata su intelligence sulle minacce e sulle caratteristiche della vulnerabilità.
EPSS Score
0,0013
Percentile
0,0th
Updated
EPSS Score Trend (Last 2 Days)
369
Divide By Zero
DraftCommon Consequences
Security Scopes Affected:
Availability
Potential Impacts:
Dos: Crash, Exit, Or Restart
Applicable Platforms
All platforms may be affected
https://github.com/gchudov/libtta
https://github.com/gchudov/libtta/blob/af8dc48ce859e98842ab1a3eec98416d22a5199e…
https://hackmd.io/@haindpwn/libtta-seek-table-count-overflow-oob-write
https://sourceforge.net/projects/tta/
https://www.vulncheck.com/advisories/libtta-through-2.3-divide-by-zero-via-tta-…