Skip to content
OpenAdvisories
Medium · 5.3 CVE-2026-112011 EUVD-2026-103464GHSA-8j2j-vgj4-crmj

libtta through 2.3 Integer Overflow via tta_decoder_init_get_info Seek Table

Published Oct 18, 2026 · Updated Oct 19, 2026 · Assigned by VulnCheck

Description

libtta through 2.3 contains an integer overflow vulnerability in tta_decoder_init_get_info() that allows attackers to cause a heap buffer overflow on 32-bit builds via unvalidated header fields. Attackers can supply a crafted .tta file with a sample rate of 1 and large samples value, wrapping the seek table allocation and crashing applications.

Affected products

VendorProductAffectedFixed
True Audio libtta ≤ 2.3 —

References