Skip to content
OpenAdvisories

Vendor

tinytag

2 known vulnerabilities.

Products

tinytag 2
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 6.5
    CVE-2026-104266

    tinytag: Infinite loop when parsing certain M4A files containing invalid atoms

    tinytag is a Python library for reading audio file metadata. From 2.0.0 until 2.3.0, an M4A file containing a sub-atom with a size of zero inside a ---- atom can cause the metadata parser to stop advancing through the input. The custom-field atom traversal re…

    tinytag tinytag tinytag python-tinytag Debian Ubuntu PyPI
  • Medium 6.5
    CVE-2026-32889

    tinytag: Denial of Service via non-terminating SYLT frame parsing loop

    tinytag is a Python library for reading audio file metadata. Version 2.2.0 allows an attacker who can supply MP3 files for parsing to trigger a non-terminating loop while the library parses an ID3v2 SYLT (synchronized lyrics) frame. In server-side deployments…

    tinytag tinytag tinytag PyPI