A single integer overflow in the tta_decoder_init_get_info function allows an attacker to trigger a heap buffer overflow on 32‑bit builds of libtta. The overflow is driven by unvalidated header fields in a .tta file, specifically a sample rate of 1 coupled with an excessively large sample count. The vulnerable allocation of the seek table can be coerced to wrap around, leading to an out‑of‑bounds write that corrupts heap memory and may crash the application.

The vulnerability resides in True Audio’s libtta library, affecting all releases up to and including version 2.3. Any application that integrates this library on a 32‑bit platform and processes .tta audio files is potentially impacted.

The CVSS score of 5.8 indicates a moderate severity, primarily impacting availability through forced crashes. The EPSS score is not available, and the vulnerability is not listed in CISA’s KEV catalog. The attack vector is inferred to be through the consumption of maliciously crafted .tta files, meaning that the threat exists when an application accepts audio files from untrusted sources or when the library is exposed to network‑driven media streams.