VendorsBorewitmusic-metadataall versions
Vulnerabilities

Borewit music-metadata

Ranked by severity, then by exploit likelihood, unless you sort otherwise. Click a CVE ID for its full record.

7CVEs
CVE-2026-32256
music-metadata has an infinite loop vulnerability in ASF parser
Published 2026-03-18 · Analyzed
7.5EPSS 0.004
CVE-2026-107392
music-metadata: uncatchable process crash parsing a crafted `.dsf` (residual of CVE-2026-32256)
Published 2026-10-08 · Analyzed
7.5EPSS 0.004
CVE-2026-107390
music-metadata: MP4 parser allows memory exhaustion via oversized extended atom length
Published 2026-10-08 · Analyzed
7.5EPSS 0.003
CVE-2026-107391
music-metadata: MP4 stsd sample-entry size==0 causes a synchronous infinite loop (DoS) — unreleased regression on master
Published 2026-10-08 · Analyzed
7.5EPSS 0.003
CVE-2026-107389
music-metadata: EBML parser trusts element lengths, allowing memory exhaustion or process abort
Published 2026-10-08 · Analyzed
6.2EPSS 0.002
CVE-2026-107387
music-metadata: Uncontrolled memory allocation in APEv2 parser
Published 2026-10-08 · Analyzed
6.2EPSS 0.002
CVE-2026-107388
music-metadata: ID3v2 tag size not validated before allocation, causing memory exhaustion DoS
Published 2026-10-08 · Modified
6.2EPSS 0.002