Lucene search
+L

1 matches found

Github Security Blog
Github Security Blog
•added 2026/10/08 7:40 p.m.•5 views

music-metadata: uncatchable process crash parsing a crafted `.dsf` (residual of GHSA-v6c2-xwv6-8xf7)

Summary DsfParser.parseChunks skips an unrecognised chunk's payload with an un-awaited call: js this.tokenizer.ignoreNumberchunkHeader.size - ChunkHeader.len; // lib/dsf/DsfParser.js:51 — no await ChunkHeader.len is 12. A crafted .dsf chunk with id != 'fmt ' and size in 0..11 makes the argument...

6.2CVSS5.7AI score
SaveExploits0References5Affected Software1
Rows per page
Query Builder