CyberSecBulletin

MediaArea vulnerabilities

We track 4 vulnerabilities in MediaArea products. 4 are rated high or critical, and none are known to be exploited. The most recent was published on May 26, 2026.

4vulnerabilities
0critical
4high
0exploited
7.8average CVSS score

Latest MediaArea vulnerabilities

  • 7.8 High severity

    MediaInfoLib: Heap-based Buffer Overflow

    CVE-2026-25713MediaArea

    A heap-based buffer overflow vulnerability exists in the ID3v2 parsing functionality of MediaInfoLib (version(s): 26.01). A specially crafted media file that contains ID3v2 tags can lead to arbitrary code execution. An attacker can provide a malicious file to

  • 7.8 High severity

    MediaInfoLib: Integer Underflow (Wrap or Wraparound)

    CVE-2026-25104MediaArea

    A heap-based buffer overflow vulnerability exists in the LXF parsing functionality of MediaInfoLib (version(s): 26.01). A specially crafted .lxf file can lead to arbitrary code execution. An attacker can provide a malicious file to trigger this vulnerability.

  • 7.8 High severity

    MediaInfoLib: Use of Out-of-range Pointer Offset

    CVE-2026-28764MediaArea

    A heap-based buffer overflow vulnerability exists in the LXF element parsing functionality of MediaInfoLib (version(s): 26.01). A specially crafted .lxf file can lead to arbitrary code execution. An attacker can provide a malicious file to trigger this vulnera

  • 7.8 High severity

    MediaInfoLib: Heap-based Buffer Overflow

    CVE-2026-22554MediaArea

    A heap-based buffer overflow vulnerability exists in the Channel Splitting functionality of MediaInfoLib (version(s): 26.01). A specially crafted .riff file can lead to arbitrary code execution. An attacker can provide a malicious file to trigger this vulnerab