libtheora vulnerabilities

CVEs whose affected-version data names the libtheora package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-5673Medium· 5.6

7mo ago

Libtheora: libtheora: denial of service or information disclosure via malformed avi file processing

A flaw was found in libtheora. This heap-based out-of-bounds read vulnerability exists within the AVI (Audio Video Interleave) parser, specifically in the avi_parse_input_file() function. A local attacker could exploit this by tricking a…

▾ SunlitRed Hat · libtheoraEPSS 0.18%via CVEORG