libtta through 2.3 contains a divide-by-zero vulnerability in tta_decoder_init_get_info() that allows attackers to crash applications by supplying an unvalidated zero sample rate. This vulnerability can be triggered by crafting a .tta file with a recomputed header CRC32 that causes SIGFPE, impacting applications using the libtta library, including the bundled tta console tool. Defenders should assess expo [truncated]
A stack out-of-bounds read and write vulnerability exists in libtta through version 2.3. The vulnerability is caused by a lack of header checks, allowing a zero channel count. Attackers can supply a crafted .tta file declaring zero channels, leading to decorrelation accesses cache[-1] with stream-derived values, corrupting stack memory in decoding applications.
CVE-2026-112011 is an integer overflow vulnerability in libtta through 2.3, specifically in the tta_decoder_init_get_info() function. This vulnerability allows attackers to cause a heap buffer overflow on 32-bit builds via unvalidated header fields in a crafted .tta file. The vulnerability is considered medium severity with a CVSS score of 5.8. Affected product deployments should be reviewed for exposure, [truncated]
