Vulnerability · Published Oct 19, 2026 · Assigned by VulnCheck

CVE-2026-112281libaribb24 through 1.0.3 Stack Buffer Overflow via decoder_handle_csi

Medium 6.1

In plain English

A medium-severity stack buffer overflow in aribb24 from nkoriyama. Proof-of-concept exploit code is public. The chance it is exploited in the next 30 days is estimated at 0.2% (higher than 10% of all known vulnerabilities).

Severity (CVSS 3.1)6.1Medium

Exploit odds (30 days)0.2%top 90.5% of all CVEs

Exploited in the wildNo reportsCISA SSVC: poc

Attack toolingNoneno public tooling known

Official description

libaribb24 (aribb24) through 1.0.3 contains a stack-based buffer overflow vulnerability in decoder_handle_csi() in src/decoder.c that allows attackers to write past a fixed 256-entry array by supplying unbounded CSI parameter bytes. Attackers can embed a caption statement with a CSI introducer and over 256 parameter bytes in media files or broadcast streams to crash FFmpeg or VLC or corrupt the return address.

Affected products (as reported)

Vendor	Product	Versions
nkoriyama	aribb24	0 – through 1.0.3

Weakness: CWE-121 · Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:H

References

https://hackmd.io/@haindpwn/aribb24-caption-data-unit-and-csi-oob-write third-party-advisory
https://github.com/nkoriyama/aribb24/blob/v1.0.3/src/decoder.c technical-description
VulnCheck Advisory: libaribb24 through 1.0.3 Stack Buffer Overflow via decoder_handle_csi third-party-advisory
https://hackmd.io/@haindpwn/cve-2026-112280-112281-aribb24-caption-data-unit-and-csi-oob-write exploit