CVE-2026-112011: Integer Overflow or Wraparound in True Audio libtta

The vulnerability in libtta versions up to 2.3 involves an integer overflow or wraparound in the tta_decoder_init_get_info() function. On 32-bit systems, an attacker can craft a .tta file with a sample rate of 1 and a large samples value, causing the seek table allocation size to wrap around. This results in a heap buffer overflow, potentially crashing the application processing the file. The CVSS 4.0 score is 5.8, indicating a medium severity vulnerability with local attack vector, low attack complexity, and partial impact on availability and integrity.

Exploitation of this vulnerability can cause a heap buffer overflow leading to application crashes on 32-bit builds of libtta. There is no indication of remote exploitation or privilege escalation. The impact is limited to denial of service or application instability.

No vendor advisory or patch information is provided. Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, avoid processing untrusted .tta files on 32-bit systems or use alternative audio decoding libraries.