CVE-2026-51275

In schreibfaul1 ESP32-audioI2S 3.4.5, a heap-based buffer overflow in the ID3v2 APIC frame parsing function in audiolib allows remote attackers to execute arbitrary code or cause a denial of service crash via a crafted MP3 file. The vulnerability exists due to missing length validation when...

CVE-2026-51275

CVE-2026-51275 affects schreibfaul1 ESP32-audioI2S 3.4.5. The vulnerability is a heap-based buffer overflow in the audiolib ID3v2 APIC frame parser caused by missing length validation of the APIC frame size field, enabling an attacker to supply a crafted MP3 file that triggers an out-of-bounds wr...

EUVD-2026-49927

In schreibfaul1 ESP32-audioI2S 3.4.5, a heap-based buffer overflow in the ID3v2 SYLT synchronized lyrics parser in audiolib allows remote attackers to cause a denial of service application crash, information disclosure, or potential arbitrary code execution via a crafted MP3 file. The vulnerabili...

PYSEC-2026-3386 Denial of service via non-terminating SYLT frame parsing loop in tinytag

Summary tinytag 2.2.0 allows an attacker who can supply MP3 files for parsing to trigger a non-terminating loop while the library parses an ID3v2 SYLT synchronized lyrics frame. In server-side deployments that automatically parse attacker-supplied files, a single 498-byte MP3 can cause the parsin...

CVE-2026-25713

MediaArea MediaInfoLib ID3v2 parsing heap buffer overflow vulnerability...

CVE-2026-25713

MediaArea MediaInfoLib ID3v2 parsing heap buffer overflow vulnerability...

Astra Linux – Vulnerability in gst-plugins-base1.0

GStreamer before version 1.18.4 may perform an out-of-bounds read when handling certain ID3v2 tags...

GHSA-F4RQ-2259-HV29 Denial of service via non-terminating SYLT frame parsing loop in tinytag

Summary tinytag 2.2.0 allows an attacker who can supply MP3 files for parsing to trigger a non-terminating loop while the library parses an ID3v2 SYLT synchronized lyrics frame. In server-side deployments that automatically parse attacker-supplied files, a single 498-byte MP3 can cause the parsin...

EUVD-2002-1160

Malware in sbrugna...

EUVD-2004-2769

Malware in sbrugna...

EUVD-2002-1161

Malware in sbrugna...

EUVD-2009-4171

Malware in sbrugna...

EUVD-2010-2941

Malware in sbrugna...

EUVD-2011-2917

Malware in sbrugna...

EUVD-2020-10575

Malware in sbrugna...

EUVD-2021-26838

Malware in sbrugna...

EUVD-2013-0858

Malware in sbrugna...

EUVD-2005-2311

Malware in sbrugna...

EUVD-2002-0542

Malware in sbrugna...

EUVD-2009-1299

Malware in sbrugna...