Description
libdisplay-info through 0.4.0 contains a heap out-of-bounds read vulnerability in the DisplayID v1 section parser in displayid.c that occurs when a data block's declared length exceeds the section. Attackers can supply a crafted EDID from a malicious monitor, KVM, capture device, or EDID file to make is_all_zeroes read past the buffer, causing a possible crash.
Published: 2026-10-19
Score: 6.8 Medium
EPSS: n/a
KEV: No
Impact: Denial of Service
Action: Apply Patch
AI Analysis

Impact

libdisplay-info up to and including version 0.4.0 contains a heap out‑of‑bounds read in the DisplayID v1 section parser. The flaw occurs when the declared length of a data block is greater than the actual section length, causing the is_all_zeroes function to read past the buffer. This out‑of‑bounds read can lead to a crash of any process that parses an EDID, resulting in a denial of service. The weakness is classified as CWE‑125.

Affected Systems

The affected vendor is emersion, and the vulnerable product is the libdisplay-info library. All releases through version 0.4.0 contain the issue. Users of 0.4.0 or older must update to a patched version once it becomes available.

Risk and Exploitability

The CVSS score of 6.8 indicates moderate severity, and the vulnerability is not listed in the CISA KEV catalog. Attacks require an attacker to supply a crafted EDID obtained from a malicious monitor, a KVM, a capture device or an arbitrary EDID file. By delivering such an EDID to a system that uses libdisplay-info, the attacker can trigger a crash or denial of service. Because the flaw is an out‑of‑bounds read, it does not directly enable code execution, but it can disrupt availability of affected services.

Generated by OpenCVE AI on October 19, 2026 at 15:45 UTC.

Remediation

No solution or workaround provided in the CVE record.

OpenCVE Recommended Actions

  • Upgrade to a patched release of libdisplay-info (e.g., 0.5.0 or newer).
  • Implement application‑level validation of EDID data blocks, ensuring declared lengths do not exceed actual section sizes, particularly in virtualized or capture environments.
  • If an upgrade cannot be performed immediately, isolate systems that depend on libdisplay-info, block or disable external EDID processing, and monitor for crashes until a fixed version is available.

Generated by OpenCVE AI on October 19, 2026 at 15:45 UTC.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

History

Mon, 19 Oct 2026 15:30:00 +0000

Type Values Removed Values Added
References
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'poc', 'Technical Impact': 'partial'}, 'version': '2.0.3'}

Mon, 19 Oct 2026 14:00:00 +0000

Type Values Removed Values Added
Description libdisplay-info through 0.4.0 contains a heap out-of-bounds read vulnerability in the DisplayID v1 section parser in displayid.c that occurs when a data block's declared length exceeds the section. Attackers can supply a crafted EDID from a malicious monitor, KVM, capture device, or EDID file to make is_all_zeroes read past the buffer, causing a possible crash.
Title libdisplay-info through 0.4.0 Heap Out-of-Bounds Read via DisplayID v1 Parser
Weaknesses CWE-125
References
Metrics cvssV3_1

{'score': 5.5, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H'}

cvssV4_0

{'score': 6.8, 'vector': 'CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N'}

Subscriptions

No data.

cve-icon MITRE

Status: PUBLISHED

Assigner: VulnCheck

Published:

Updated: 2026-10-19T14:11:35.515Z

Reserved: 2026-10-19T13:25:27.630Z

Link: CVE-2026-112271

cve-icon Vulnrichment

Updated: 2026-10-19T14:11:28.639Z

cve-icon NVD

Status : Received

Published: 2026-10-19T14:17:04.787

Modified: 2026-10-19T15:17:05.597

Link: CVE-2026-112271

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2026-10-19T16:00:15Z

Weaknesses