MediaArea heap
Vulnerabilities mentionedAll →
| CVE | Vulnerability | CVSS | EPSS | Flags | Affected | Exposure | Published |
|---|---|---|---|---|---|---|---|
| CVE-2026-22554 | MediaArea MediaInfoLib Channel Splitting heap-based buffer overflow vulnerability MediaArea MediaInfoLib Channel Splitting heap-based buffer overflow vulnerability NVD description · AI analysis pending | 7.8 | <1% |
| — | ||
| CVE-2026-25104 +1 in the same advisory: …25713 | MediaArea MediaInfoLib LXF parsing heap-based buffer overflow vulnerability MediaArea MediaInfoLib LXF parsing heap-based buffer overflow vulnerability NVD description · AI analysis pending | 7.8 | <1% | PoC ×2 |
| — | |
| CVE-2026-28764 | MediaArea MediaInfoLib LXF element parsing heap-based buffer overflow vulnerability MediaArea MediaInfoLib LXF element parsing heap-based buffer overflow vulnerability NVD description · AI analysis pending | 7.8 | <1% | PoC ×2 |
| — |
Full article157 words · extracted from blog.talosintelligence.com · click to collapse
Wednesday, May 27, 2026 10:00
Cisco Talos’ Vulnerability Discovery & Research team recently disclosed four vulnerabilities in MediaArea MediaInfoLib library.
The vulnerabilities mentioned in this blog post have been patched by their respective vendor, in adherence to Cisco’s third-party vulnerability disclosure policy.
For Snort coverage that can detect the exploitation of these vulnerabilities, download the latest rule sets from Snort.org, and our latest Vulnerability Advisories are always posted on Talos Intelligence’s website.
Discovered by Dimitrios Tatsis of Cisco Talos.
MediaArea produces digital media analysis open-source software, as well as support tools for file investigation. MediaInfoLib provides a UI for technical and tag data for video and audio media files. Talos discovered four vulnerabilities in MediaInfoLib.
TALOS-2026-2367 (CVE-2026-25104), TALOS-2026-2368 (CVE-2026-25713), TALOS-2026-2371 (CVE-2026-28764), and TALOS-2026-2374 (CVE-2026-22554) are heap-based buffer overflow vulnerabilities in various functionalities of MediaInfoLib (version(s): 26.01). All can lead to arbitrary code execution. An attacker can provide a malicious file to trigger these vulnerabilities.
Text extracted automatically; images, tables and formatting may be missing. Original: https://blog.talosintelligence.com/mediaarea-heap-based-buffer-overflow-vulnerabilities/