Videolan Libbluray vulnerabilities

3 vulnerabilities

Known vulnerabilities in Videolan Libbluray, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

6.8CVE-2026-112283debianlibbluray+1
EPSS score
0.12%
VideoLAN libbluray through 1.5.1 contains an uncontrolled memory allocation vulnerability in _parse_extent_start_points() in clpi_parse.c that trusts the num_point field without bounds checking. Attackers can supply a crafted .clpi file on a disc, image, or directory with a huge num_point to exhaust memory and CPU, causing denial of service.6.8CVE-2026-112282debianlibbluray+1
EPSS score
0.18%
VideoLAN libbluray through 1.5.1 contains an out-of-bounds read vulnerability in clpi_access_point() that allows attackers to crash applications by supplying a ClipInfo file with an empty EP-map fine table. Attackers can place a crafted .clpi file in BDMV/CLIPINF with num_ep_fine set to zero and an unclamped ref_ep_fine_id, triggering reads during seeking for denial of service.4.7CVE-2015-7810debianlibbluray+6
EPSS score
0.38%
libbluray MountManager class has a time-of-check time-of-use (TOCTOU) race when expanding JAR files