{"affected":[{"defaultStatus":"affected","ecosystem":"https://access.redhat.com/downloads/content/package-browser/","packageName":"libtheora","product":"Red Hat Enterprise Linux 10","source":"CNA: redhat","vendor":"Red Hat","versions":[]},{"defaultStatus":"affected","ecosystem":"https://access.redhat.com/downloads/content/package-browser/","packageName":"libtheora","product":"Red Hat Enterprise Linux 6","source":"CNA: redhat","vendor":"Red Hat","versions":[]},{"defaultStatus":"affected","ecosystem":"https://access.redhat.com/downloads/content/package-browser/","packageName":"libtheora","product":"Red Hat Enterprise Linux 7","source":"CNA: redhat","vendor":"Red Hat","versions":[]},{"defaultStatus":"affected","ecosystem":"https://access.redhat.com/downloads/content/package-browser/","packageName":"libtheora","product":"Red Hat Enterprise Linux 8","source":"CNA: redhat","vendor":"Red Hat","versions":[]},{"defaultStatus":"affected","ecosystem":"https://access.redhat.com/downloads/content/package-browser/","packageName":"libtheora","product":"Red Hat Enterprise Linux 9","source":"CNA: redhat","vendor":"Red Hat","versions":[]}],"cveId":"CVE-2026-5673","cwes":["CWE-125"],"description":"A flaw was found in libtheora. This heap-based out-of-bounds read vulnerability exists within the AVI (Audio Video Interleave) parser, specifically in the avi_parse_input_file() function. A local attacker could exploit this by tricking a user into opening a specially crafted AVI file containing a truncated header sub-chunk. This could lead to a denial-of-service (application crash) or potentially leak sensitive information from the heap.","epss":{"date":"2026-11-05","percentile":0.07749,"score":0.00181},"exploits":[],"kev":null,"metrics":[{"score":5.6,"severity":"medium","source":"CNA: redhat","vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:N/A:H","version":"3.1"}],"modifiedAt":1793914981911,"publishedAt":1775467356227,"references":[{"source":"CNA: redhat","tags":["vdb-entry","x_refsource_REDHAT"],"url":"https://access.redhat.com/security/cve/CVE-2026-5673"},{"source":"CNA: redhat","tags":["issue-tracking","x_refsource_REDHAT"],"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2455340"},{"source":"CNA: redhat","tags":[],"url":"https://github.com/xiph/theora/issues/24"}],"remediation":[{"kind":"workaround","source":"CNA: redhat","text":"To mitigate this issue, users should avoid opening untrusted AVI files. Exercise caution when handling AVI files from unknown or suspicious sources."}],"revision":"fc978849dadec60babb10dfba1cee2b55bc7f430e74670d13466140c6f80e79f","sources":[{"modifiedAt":1793914981911,"name":"CNA: redhat","retrievedAt":1793917154521,"url":"https://www.cve.org/CVERecord?id=CVE-2026-5673"},{"modifiedAt":null,"name":"FIRST EPSS","retrievedAt":1793917158467,"url":"https://api.first.org/data/v1/epss?cve=CVE-2026-5673"}],"ssvc":{"assessedAt":1775497845440,"automatable":"no","exploitation":"none","source":"ADP: CISA-ADP","technicalImpact":"partial"},"status":"published","title":"Libtheora: libtheora: denial of service or information disclosure via malformed avi file processing","updatedAt":1793917158467}