https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-08T12:44:55.721270+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2026-32256 CVE-2026-32256 — music-metadata has an infinite loop vulnerability in ASF parser 2026-10-08T12:44:55.740453+00:00

Affected: Borewit music-metadata

music-metadata is a metadata parser for audio and video media files. Prior to version 11.12.3, music-metadata's ASF parser (`parseExtensionObject()` in `lib/asf/AsfParser.ts:112-158`) enters an infinite loop when a sub-object inside the ASF Header Extension Object has `objectSize = 0`. Version 11.12.3 fixes the issue.