Executive brief
MediaInfoLib is a widely used library for extracting technical metadata from audio and video files. A security vulnerability has been identified where a specially crafted media file can cause the software to crash or potentially allow an attacker to take control of the system. This risk is realized when a user opens a malicious file with an application that uses this library for processing media tags.
Technical details
A heap-based buffer overflow (CWE-122) exists in MediaInfoLib 26.01 within the ID3v2 parsing logic in File_Id3v2.cpp. The vulnerability occurs during the handling of the ID3v2 'Unsynchronization scheme,' where the parser removes NULL bytes appended to 0xFF bytes. The library fails to validate the size of the allocated 'Buffer_Unsynch' against the calculated size of the data being copied via memcpy(). An attacker can control both the allocation size and the copy size by providing a malicious file with specific ID3v2 tags, leading to memory corruption and potential arbitrary code execution. Exploitation requires a user to open a specially crafted file.
Affected products
- MediaArea MediaInfoLib 26.01
Timeline
- 2026-05-25: advisory: Initial advisory published by Cisco Talos
- 2026-05-26: disclosed: NVD publication date