Skip to content
OpenAdvisories
Critical · 9.8 CVE-2026-88365 EUVD-2026-86282GHSA-6f7j-6h98-j3ww

minimp3 commit ea99364f contains an integer overflow vulnerability in mp3dec_skip_id3v1() when parsing the APEv2 tag-size field.

Published Sep 24, 2026 · Updated Sep 29, 2026 · Assigned by mitre