173 matches found
Astra Linux – Vulnerability in gst-plugins-base1.0
GStreamer before version 1.18.4 may perform an out-of-bounds read when handling certain ID3v2 tags...
Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: gstreamer-plugins-base (UTSA-2026-093188)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-093188 advisory. GStreamer before 1.18.4 may perform an out-of-bounds read when handling certain ID3v2 tags. Tenable has extracted the preceding description block directly from the...
CVE-2026-51275
Rejected reason: DO NOT USE THIS CVE RECORD. ConsultIDs: none. Reason: This record was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none...
EUVD-2026-49927
In schreibfaul1 ESP32-audioI2S 3.4.5, a heap-based buffer overflow in the ID3v2 SYLT synchronized lyrics parser in audiolib allows remote attackers to cause a denial of service application crash, information disclosure, or potential arbitrary code execution via a crafted MP3 file. The vulnerabili...
CVE-2026-51275
The CVE-2026-51275 record is supported by connected sources indicating a concrete issue in schreibfaul1 ESP32-audioI2S 3.4.5. The vulnerability is a heap-based buffer overflow in the ID3v2 APIC frame parsing within audiolib, caused by missing length validation of the APIC frame size. This leads t...
PYSEC-2026-3386 Denial of service via non-terminating SYLT frame parsing loop in tinytag
Summary tinytag 2.2.0 allows an attacker who can supply MP3 files for parsing to trigger a non-terminating loop while the library parses an ID3v2 SYLT synchronized lyrics frame. In server-side deployments that automatically parse attacker-supplied files, a single 498-byte MP3 can cause the parsin...
PT-2026-60000
Summary tinytag 2.2.0 allows an attacker who can supply MP3 files for parsing to trigger a non-terminating loop while the library parses an ID3v2 SYLT synchronized lyrics frame. In server-side deployments that automatically parse attacker-supplied files, a single 498-byte MP3 can cause the parsin...
CVE-2026-25713
A heap-based buffer overflow vulnerability exists in the ID3v2 parsing functionality of MediaInfoLib versions: 26.01. A specially crafted media file that contains ID3v2 tags can lead to arbitrary code execution. An attacker can provide a malicious file to trigger this vulnerability...
CVE-2026-25713
A heap-based buffer overflow vulnerability exists in the ID3v2 parsing functionality of MediaInfoLib versions: 26.01. A specially crafted media file that contains ID3v2 tags can lead to arbitrary code execution. An attacker can provide a malicious file to trigger this vulnerability...
CVE-2026-25713: Heap-based Buffer Overflow
A heap-based buffer overflow vulnerability exists in the ID3v2 parsing functionality of MediaInfoLib versions: 26.01. A specially crafted media file that contains ID3v2 tags can lead to arbitrary code execution. An attacker can provide a malicious file to trigger this vulnerability...
CVE-2026-32889: Loop with Unreachable Exit Condition
tinytag is a Python library for reading audio file metadata. Version 2.2.0 allows an attacker who can supply MP3 files for parsing to trigger a non-terminating loop while the library parses an ID3v2 SYLT synchronized lyrics frame. In server-side deployments that automatically parse...
GHSA-F4RQ-2259-HV29 Denial of service via non-terminating SYLT frame parsing loop in tinytag
Summary tinytag 2.2.0 allows an attacker who can supply MP3 files for parsing to trigger a non-terminating loop while the library parses an ID3v2 SYLT synchronized lyrics frame. In server-side deployments that automatically parse attacker-supplied files, a single 498-byte MP3 can cause the parsin...
EUVD-2009-1299
Malware in sbrugna...
EUVD-2002-0542
Malware in sbrugna...
EUVD-2021-26838
Malware in sbrugna...
EUVD-2011-2917
Malware in sbrugna...
EUVD-2002-1160
Malware in sbrugna...
EUVD-2020-10575
Malware in sbrugna...