True Audio
True Audio Security Releases - October 2026
true-audio-2026-10 Oct 1, 2026 Source: Vendor
True Audio security advisories for October 2026, compiled from CVE.org records.
Source of record
The credited names below are quoted verbatim from the vendor's own advisory:
https://www.cve.org/CVERecord?id=CVE-2026-112011
Are you credited here? Sign in to claim your line. It is yours immediately, with no review queue. The name the vendor printed stays next to your handle for anyone to check against the advisory above, and any member who thinks a claim is wrong can refute it.
Credited
3 lines
Showing 1–3 of 3
CVE-2026-112011
BR2026-0000-037265
libtta
unclaimed
libtta through 2.3 contains an integer overflow vulnerability in tta_decoder_init_get_info() that allows attackers to cause a heap buffer overflow on 32-bit builds via unvalidated header fields. At...
Credited as HaiND from the Post and Telecommunication Institute of Technology
CVE-2026-112012
BR2026-0000-037266
libtta
unclaimed
libtta through 2.3 contains a stack out-of-bounds read and write vulnerability in tta_decoder_process_stream() and tta_decoder_process_frame() because header checks never reject a zero channel coun...
Credited as HaiND from the Post and Telecommunication Institute of Technology
CVE-2026-112013
BR2026-0000-037267
libtta
unclaimed
libtta through 2.3 contains a divide-by-zero vulnerability in tta_decoder_init_get_info() that allows attackers to crash applications by supplying an unvalidated zero sample rate. Attackers can cra...
Credited as HaiND from the Post and Telecommunication Institute of Technology