CVE-2026-112271: libdisplay-info through 0.4.0 Heap Out-of-Bounds Read via DisplayID v1 Parser
libdisplay-info through 0.4.0 contains a heap out-of-bounds read vulnerability in the DisplayID v1 section parser in displayid.c that occurs when a data block's declared length exceeds the section. Attackers can supply a crafted EDID from a malicious monitor, KVM, capture device, or EDID file to make isallzeroes read past the buffer, causing a possible crash.
Affected Software
Event History
Frequently Asked Questions
What systems are realistically exposed to this issue?
Systems that use libdisplay-info to parse EDID or DisplayID data are exposed when they process data from an untrusted display source, such as a malicious monitor, KVM, capture device, or EDID file.
What does an attacker need to exploit it?
An attacker needs to cause the affected software to parse a crafted EDID containing a DisplayID v1 data block whose declared length exceeds the section. The supplied severity vector indicates local attack access and user interaction are required.
What is the likely impact of successful exploitation?
The out-of-bounds read can cause a crash, resulting in a denial of service. The provided data does not indicate confidentiality or integrity impact.
How can I determine whether I am affected?
Check whether your software uses libdisplay-info and whether the installed library version is 0.4.0 or earlier. The vulnerable parsing path is the DisplayID v1 section parser in displayid.c.