CVE-2026-112013: libtta through 2.3 Divide by Zero via tta_decoder_init_get_info
libtta through 2.3 contains a divide-by-zero vulnerability in ttadecoderinitgetinfo() that allows attackers to crash applications by supplying an unvalidated zero sample rate. Attackers can craft a .tta file with a recomputed header CRC32 that triggers SIGFPE, crashing applications including the bundled tta console tool.
Affected Software
Event History
Frequently Asked Questions
Who is exposed to this issue?
Applications that use libtta through 2.3 to process attacker-supplied .tta audio files are exposed to a denial of service. The bundled tta console tool is specifically identified as affected.
What does an attacker need to exploit it?
An attacker needs to supply a crafted .tta file containing a zero sample rate and a recomputed header CRC32. User interaction is required for the vulnerable application to process the file, but no privileges are required.
What happens when exploitation succeeds?
Processing the crafted file triggers a divide-by-zero condition in tta_decoder_init_get_info(), resulting in SIGFPE and application termination. The reported impact is availability only; no confidentiality or integrity impact is stated.