CVE-2026-29508 ReadyMedia 1.3.0 - 1.3.3 Stack Buffer Overflow via DFF Parser

ReadyMedia formerly MiniDLNA versions 1.3.0 through 1.3.3 contain a stack-based buffer overflow vulnerability that allows remote attackers to corrupt stack memory by crafting a malicious DFF audio file with an oversized PROP chunk size value that is used unvalidated to allocate a variable-length...

CVE-2026-29508

ReadyMedia (formerly MiniDLNA) versions 1.3.0 through 1.3.3 are vulnerable to a stack-based buffer overflow within the DFF parser . The vulnerability occurs because the software fails to validate the PROP chunk size value in a crafted DFF audio file, which is then used to allocate a variable-leng...