Mediaarea vulnerabilities
Published CVEs affecting Mediaarea products: 4 record(s), with severity, exploitation and fixes.
CVE-2026-25713
High · 7.8
CWE-122 May 26, 2026
Heap-based Buffer Overflow in Mediaarea Mediainfolib
A heap-based buffer overflow vulnerability exists in the ID3v2 parsing functionality of MediaInfoLib (version(s): 26.01). A specially crafted media file that contains ID3v2 tags can lead to arbitrary code execution. An attacker can provide a malicious file to trigger this vulnerability.
CVE-2026-25104
High · 7.8
CWE-191 May 26, 2026
Integer Underflow in Mediaarea Mediainfolib
A heap-based buffer overflow vulnerability exists in the LXF parsing functionality of MediaInfoLib (version(s): 26.01). A specially crafted .lxf file can lead to arbitrary code execution. An attacker can provide a malicious file to trigger this vulnerability.
CVE-2026-28764
High · 7.8
CWE-823 May 21, 2026
Use of Out-of-range Pointer Offset in Mediaarea Mediainfolib
A heap-based buffer overflow vulnerability exists in the LXF element parsing functionality of MediaInfoLib (version(s): 26.01). A specially crafted .lxf file can lead to arbitrary code execution. An attacker can provide a malicious file to trigger this vulnerability.
CVE-2026-22554
High · 7.8
CWE-122 May 20, 2026
Heap-based Buffer Overflow in Mediaarea Mediainfolib
A heap-based buffer overflow vulnerability exists in the Channel Splitting functionality of MediaInfoLib (version(s): 26.01). A specially crafted .riff file can lead to arbitrary code execution. An attacker can provide a malicious file to trigger this vulnerability.