Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

3 records

Vendor: True Audio Clear all filters
TI-2026-76165 CVE-2026-112013 · GHSA-phg4-99g6-v62p

Divide by zero in libtta lets crafted files crash applications

Priority MEDIUM 63

libtta through 2.3 contains a divide-by-zero vulnerability in tta_decoder_init_get_info() that allows attackers to crash applications by supplying an unvalidated zero sample rate.

CVSS 4.0MEDIUM 6.8 Local No auth User interaction EPSS 0.0013 Published 2026-10-18 No fix listed CWE-369
TI-2026-76164 CVE-2026-112012 · GHSA-5v95-f854-g2v7

Stack out-of-bounds read and write in libtta via zero channel count

Priority MEDIUM 55

libtta through 2.3 contains a stack out-of-bounds read and write vulnerability in tta_decoder_process_stream() and tta_decoder_process_frame() because header checks never reject a zero channel count.

CVSS 4.0MEDIUM 4.8 Local No auth User interaction EPSS 0.00125 Published 2026-10-18 No fix listed CWE-787
TI-2026-76163 CVE-2026-112011 · GHSA-8j2j-vgj4-crmj

Integer overflow in libtta seek table allocation enables heap overflow

Priority MEDIUM 59

libtta through 2.3 contains an integer overflow vulnerability in tta_decoder_init_get_info() that allows attackers to cause a heap buffer overflow on 32-bit builds via unvalidated header fields.

CVSS 4.0MEDIUM 5.8 Local No auth User interaction EPSS 0.00137 Published 2026-10-18 No fix listed CWE-190