CVE-2026-32256

music-metadata is a metadata parser for audio and video media files. Prior to version 11.12.3, music-metadata's ASF parser "parseExtensionObject" in "lib/asf/AsfParser.ts:112-158" enters an infinite loop when a sub-object inside the ASF Header Extension Object has "objectSize = 0". Version 11.12....

CVE-2026-32256: Loop with Unreachable Exit Condition

music-metadata is a metadata parser for audio and video media files. Prior to version 11.12.3, music-metadata's ASF parser parseExtensionObject in lib/asf/AsfParser.ts:112-158 enters an infinite loop when a sub-object inside the ASF Header Extension Object has objectSize = 0. Version 11.12.3 fixe...