CVE-2026-112058

A flaw was found in libdvdnav. An attacker could trigger a Denial of Service (DoS) by convincing a user to load a specially crafted DVD or disc image. Due to missing input validation in the set_PTT function, an invalid title number causes the library to read memory beyond allocated boundaries, leading to an application crash.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Do not open DVD media or disc images from untrusted or unverified sources.

If media playback capabilities are not required on the system, remove the libdvdnav package:

dnf remove libdvdnav

Caveats: Removing libdvdnav will also remove dependent multimedia packages and may impact desktop media playback capabilities.