CVE-2026-31808

🗓️ 10 Mar 2026 21:01:55Reported by AttackerKBType

attackerkb🔗 attackerkb.com👁 10 Views

DoS in ASF file detection causes loop when ASF sub-header size is zero; fixed in 21.3.1.

Reporter	Title	Published	Views	Family All 36
IBM Security Bulletins	Security Bulletin: IBM Watson Discovery Cartridge affected by vulnerability in file-type-16.5.4.tgz	9 Jun 202615:40	–	ibm
IBM Security Bulletins	Security Bulletin: IBM App Connect Enterprise is vulnerable to a denial of service due to Node.js module file-type ( CVE-2026-31808 )	16 Jun 202611:18	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerability in ASF (WMV/WMA) file type detection parser affects IBM watsonx Assistant Cartridge and IBM watsonx Orchestrate with watsonx Assistant Cartridge.	25 Aug 202618:24	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities in IBM Concert Software	27 Aug 202607:44	–	ibm
IBM Security Bulletins	Security Bulletin: Automation Assets in IBM Cloud Pak for Integration is vulnerable to multiple vulnerabilities in Node.js	20 Apr 202612:05	–	ibm
Chainguard	CVE-2026-31808 vulnerabilities	20 Mar 202601:17	–	cgr
CNNVD	file type 安全漏洞	10 Mar 202600:00	–	cnnvd
CVE	CVE-2026-31808	10 Mar 202621:01	–	cve
Cvelist	CVE-2026-31808 file-type affected by infinite loop in ASF parser on malformed input with zero-size sub-header	10 Mar 202621:01	–	cvelist
EUVD	EUVD-2026-10894	10 Mar 202623:57	–	euvd

Vulners

Node

sindresorhus file-typeRange13.0.0–21.3.1

Source	Link
cve	www.cve.mitre.org/cgi-bin/cvename.cgi
github	www.github.com/sindresorhus/file-type/commit/319abf871b50ba2fa221b4a7050059f1ae096f4f
github	www.github.com/sindresorhus/file-type/security/advisories/GHSA-5v7r-6r5c-r473

10 Mar 2026 21:32Current

5.8Medium risk

Vulners AI Score5.8

CVSS 3.15.3

EPSS0.00325

denial of service asf file detection sub header zero infinite loop node javascript event loop