Mediainfolib
Approved changes feed: RSS · Atom
cpe:2.3:a:mediaarea:mediainfolib:*:*:*:*:*:*:*:*part: a version: * update: *
| Vendor | Mediaarea (67b5ffa9-74eb-5033-a13a-c577c9dc2b92) |
|---|---|
| Product | Mediainfolib (cfb141aa-6e0c-57e3-8485-b8981b9ccaa6) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from purl2cpe mapping
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:github/mediaarea/mediainfo |
purl2cpe | 2026-06-01 10:13:42.988888 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-28764 |
vulnerable | 2026-06-08 07:55:15.628922 |
Details available
HIGH (7.8)
A heap-based buffer overflow vulnerability exists in the LXF element parsing functionality of MediaInfoLib (version(s): 26.01). A specially crafted .lxf file can lead to arbitrary code execution. An attacker can provide a malicious file to trigger this vulnerability.
Published: 2026-05-21T08:52:18.239Z
Updated: 2026-09-23T12:03:44.535Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-25713 |
vulnerable | 2026-06-08 07:53:20.251168 |
Details available
HIGH (7.8)
A heap-based buffer overflow vulnerability exists in the ID3v2 parsing functionality of MediaInfoLib (version(s): 26.01). A specially crafted media file that contains ID3v2 tags can lead to arbitrary code execution. An attacker can provide a malicious file to trigger this vulnerability.
Published: 2026-05-26T08:39:55.488Z
Updated: 2026-09-23T12:00:53.126Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-25104 |
vulnerable | 2026-06-08 07:53:18.974959 |
Details available
HIGH (7.8)
A heap-based buffer overflow vulnerability exists in the LXF parsing functionality of MediaInfoLib (version(s): 26.01). A specially crafted .lxf file can lead to arbitrary code execution. An attacker can provide a malicious file to trigger this vulnerability.
Published: 2026-05-26T08:41:52.529Z
Updated: 2026-09-23T11:57:46.549Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-22554 |
vulnerable | 2026-06-08 07:51:13.069324 |
Details available
HIGH (7.8)
A heap-based buffer overflow vulnerability exists in the Channel Splitting functionality of MediaInfoLib (version(s): 26.01). A specially crafted .riff file can lead to arbitrary code execution. An attacker can provide a malicious file to trigger this vulnerability.
Published: 2026-05-20T13:58:36.993Z
Updated: 2026-09-23T11:52:11.137Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.