PT-2026-108169

Name of the Vulnerable Software and Affected Versions music-metadata versions prior to 11.16.0 Description The Matroska and WebM EBML parser decodes an attacker-controlled VINT element length and uses it for string-token or Uint8Array allocation before confirming that the leaf fits within its...