CVE-2026-112057

A flaw was found in libdvdnav. This vulnerability allows an attacker to cause a Denial of Service (DoS) by tricking a user into opening a specially crafted DVD or disc image. When the library parses chapters from a disc declaring an oversized title index, it performs an out-of-bounds read beyond allocated memory, resulting in an application crash.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Avoid processing or opening untrusted DVD optical discs and ISO images in media playback applications.

If DVD playback capabilities are not required, remove the optional libdvdnav package:

dnf remove libdvdnav

Caveats: Removing libdvdnav will remove dependent media player packages and may affect graphical multimedia tools. Server systems operated via the command line or terminal remain unaffected.