Skip to content
OpenAdvisories
High · 7.8 CVE-2026-25104 EUVD-2026-31808GHSA-fmqg-j5qj-j8f6

A heap-based buffer overflow vulnerability exists in the LXF parsing functionality of MediaInfoLib (version(s): 26.01). A specially crafted…

Published May 26, 2026 · Updated Sep 23, 2026 · Assigned by talos

Vendor: MediaArea Product: MediaInfoLib

Description

A heap-based buffer overflow vulnerability exists in the LXF parsing functionality of MediaInfoLib (version(s): 26.01). A specially crafted .lxf file can lead to arbitrary code execution. An attacker can provide a malicious file to trigger this vulnerability.

Affected products

VendorProductAffectedFixed
MediaArea MediaInfoLib 26.01 —

References