CVE-2026-25713 - A heap-based buffer overflow vulnerability exists in the ID3v2 parsing functionality of MediaInfoLib (version(s): 26.01)

Back Back to CVE browser

HIGH

A heap-based buffer overflow vulnerability exists in the ID3v2 parsing functionality of MediaInfoLib (version(s): 26.01)

Published May 26, 2026

7.8

HIGH

CVSS 3.1

EPSS 0.22%

Description

A heap-based buffer overflow vulnerability exists in the ID3v2 parsing functionality of MediaInfoLib (version(s): 26.01). A specially crafted media file that contains ID3v2 tags can lead to arbitrary code execution. An attacker can provide a malicious file to trigger this vulnerability.

Affected products

Vendor MediaArea Product MediaInfoLib Default
unaffected
- Version
  26.01
  Status
  affected
  Constraints
  -

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

MediaArea

MediaInfoLib

unaffected

Version	Status	Constraints
26.01	affected	-

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-122

References (3)

https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-31807
Advisory
https://talosintelligence.com/vulnerability_reports/TALOS-2026-2368
ExploitThird Party Advisory
https://www.talosintelligence.com/vulnerability_reports/TALOS-2026-2368
ExploitThird Party Advisory

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-31807		Advisory
https://talosintelligence.com/vulnerability_reports/TALOS-2026-2368		ExploitThird Party Advisory
https://www.talosintelligence.com/vulnerability_reports/TALOS-2026-2368		ExploitThird Party Advisory