CVE-2026-112284: libaribcaption 1.1.0 through 1.1.2

Affected technology

libaribcaption · 1.1.0 through 1.1.2
xqq

Description’s affected range: through 1.1.2

Component: Not specified by the source

Attack conditions (Vendor/CNA, CVSS 4.0): Local · No privileges required · Passive user interaction

What an attacker can do

Attackers can supply crafted captions designating the Latin special set with ESC 28 4C followed by bytes 0x6F-0x7E to leak adjacent read-only data or crash decoding. Vendor/CNA’s CVSS 4.0 assessment (base score 4.8/10) rates confidentiality and integrity impact as none; availability impact as low.