# CVE-2026-112271: libdisplay-info heap out-of-bounds read in DisplayID parser

Source: https://junglewise.ai/threats/cve-2026-112271-libdisplay-info-through-0-4-0-contains-a-heap-out-of-bounds-read  
Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats  
Published: 2026-10-19. Updated: 2026-10-19  
License: CC BY 4.0 with a link back

CVE-2026-112271 · Severity: medium · CVSS 5.5 · Published 2026-10-19

libdisplay-info is a library that parses EDID and DisplayID data from monitors and display devices. A flaw in the DisplayID v1 section parser allows a malicious monitor, KVM, or capture device to send a crafted display configuration that causes the library to read past allocated memory, potentially crashing applications that use it.

Vendors: [Freedesktop](https://junglewise.ai/threats/vendors/freedesktop).

## Quick answers

**Is CVE-2026-112271 exploited in the wild?** No. Junglewise Threat Intelligence has no report of CVE-2026-112271 being exploited in the wild.

**How severe is CVE-2026-112271?** Medium severity, with a CVSS score of 5.5, published 19 October 2026.

**Which products and versions are affected?** Freedesktop Libdisplay-Info through 0.4.0.

**Is there a fix for CVE-2026-112271?** No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.

**How is CVE-2026-112271 attacked?** It is attacked from the adjacent network or with physical access, in a software library.

**Am I affected by CVE-2026-112271?** Check whether you run Freedesktop Libdisplay-Info at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

## Technical details

A heap out-of-bounds read vulnerability exists in the displayid.c file where the is_all_zeroes function reads past the buffer boundary when a data block's declared length exceeds the section size. An attacker can craft a malicious EDID file or provide one via a physical display device, KVM, or video capture device to trigger this read, causing denial of service through a crash.

## Affected products

- freedesktop libdisplay-info through 0.4.0

## Timeline

- 2026-10-19: disclosed

## References

- [https://gitlab.freedesktop.org/emersion/libdisplay-info](https://gitlab.freedesktop.org/emersion/libdisplay-info)
- [https://gitlab.freedesktop.org/emersion/libdisplay-info/-/blob/0.4.0/displayid.c](https://gitlab.freedesktop.org/emersion/libdisplay-info/-/blob/0.4.0/displayid.c)