libtta up to version 2.3 fails to reject headers that declare zero channels, allowing a crafted .tta file to trigger out‑of‑bounds reads and writes during decoding. The decoder accesses cache indices that are out of range, corrupting stack memory and potentially enabling arbitrary code execution or denial of service. The weakness is an improper bounds check, identified as CWE‑787.

True Audio’s libtta library versions 2.3 and earlier are affected. Any application or service that loads .tta files using this library is at risk. The list of specific applications is not provided, so any software that links against libtta 2.3 or earlier may be vulnerable.

The CVSS score of 4.8 indicates moderate severity. No EPSS score is available, and the vulnerability is not listed in the CISA KEV catalog, suggesting it has not yet been widely exploited. Attackers would need to supply a malicious .tta file to a decoder that accepts the file; thus the vector is likely local or remote file ingestion by a vulnerable application. Given the absence of active exploitation indications, the risk is moderate but non‑zero, and organizations using libtta should verify their software version and apply countermeasures.