CVE-2026-25713: Buffer Overflow

Published May 26, 2026

Updated

A heap-based buffer overflow vulnerability exists in the ID3v2 parsing functionality of MediaInfoLib (version(s): 26.01). A specially crafted media file that contains ID3v2 tags can lead to arbitrary code execution. An attacker can provide a malicious file to trigger this vulnerability.

Affected Software

2 affected components

MediaArea MediaInfoLib

MediaArea MediaInfoLib=26.01

Event History

May 26, 2026

CVE Published

via MITRE·08:39 AM

Data Sourced

via MITRE·08:39 AM

DescriptionSeverityWeakness

Data Sourced

via NVD·09:16 AM

DescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

What is the severity of CVE-2026-25713?

The severity of CVE-2026-25713 is rated high with a score of 7.8.

What type of vulnerability is CVE-2026-25713?

CVE-2026-25713 is a heap buffer overflow vulnerability related to ID3v2 parsing in MediaArea MediaInfoLib.

How do I fix CVE-2026-25713?

To fix CVE-2026-25713, update MediaArea MediaInfoLib to the latest version that addresses this vulnerability.

What are the potential impacts of CVE-2026-25713?

The potential impacts of CVE-2026-25713 include denial of service and the possibility of code execution due to the buffer overflow.

Who is affected by CVE-2026-25713?

Users and applications relying on MediaArea MediaInfoLib for ID3v2 parsing are affected by CVE-2026-25713.