CVE-2026-5673

A flaw was found in libtheora. This heap-based out-of-bounds read vulnerability exists within the AVI (Audio Video Interleave) parser, specifically in the avi_parse_input_file() function. A local attacker could exploit this by tricking a user into opening a specially crafted AVI file containing a truncated header sub-chunk. This could lead to a denial-of-service (application crash) or potentially leak sensitive information from the heap.

• CWE-125

• https://access.redhat.com/security/cve/CVE-2026-5673Third Party Advisory
• https://bugzilla.redhat.com/show_bug.cgi?id=2455340Issue Tracking, Third Party Advisory
• https://github.com/xiph/theora/issues/24Exploit, Issue Tracking, Third Party Advisory

Published

Apr 6, 2026

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-56701Grav before 2.0.0-beta.2 contains an XML external entity inj…7.1
• CVE-2026-5671A vulnerability was determined in Cyber-III Student-Manageme…4.3
• CVE-2026-5672A vulnerability has been found in code-projects Simple IT Di…7.3
• CVE-2026-56720CamaleonCMS version 2.9.2 and earlier contains a missing aut…5.3
• CVE-2026-56721CamaleonCMS version 2.9.2 and earlier contains a privilege e…8.8
• CVE-2026-56722Dompdf is an HTML to PDF converter for PHP. In versions 3.15…5.3
• CVE-2026-5674A flaw was found in PipeWire, a multimedia server. This vuln…8.8
• CVE-2026-56740JLine is a Java library for handling console input. Prior to…7.5
• CVE-2026-56741JLine is a Java library for handling console input. Prior to…7.5
• CVE-2026-56742Cilium is a networking, observability, and security solution…8.9
• CVE-2026-56743Cilium is a networking, observability, and security solution…5.4
• CVE-2026-56745Netty is a network application framework for development of …7.5