https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 12:38:22 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-327670 EUVD-2026-327670 https://cve.radiocsirt.org/vuln/euvd-2026-327670 https://cve.radiocsirt.org/vuln/fkie_cve-2026-1766 <p>A flaw was found in GNOME localsearch (previously known as tracker-miners) MP3 Extractor, specifically within the tracker-extract-mp3 component. This heap buffer overflow vulnerability occurs when processing specially crafted MP3 files containing malformed ID3v2.3 COMM (Comment) tags. An attacker could exploit this by providing a malicious MP3 file, leading to a denial of service (DoS), which causes an application crash, and potentially disclosing sensitive information from the heap memory.</p> <p>A flaw was found in GNOME localsearch (previously known as tracker-miners) MP3 Extractor, specifically within the tracker-extract-mp3 component. This heap buffer overflow vulnerability occurs when processing specially crafted MP3 files containing malformed ID3v2.3 COMM (Comment) tags. An attacker could exploit this by providing a malicious MP3 file, leading to a denial of service (DoS), which causes an application crash, and potentially disclosing sensitive information from the heap memory.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-1766 https://cve.radiocsirt.org/vuln/ghsa-4x89-cjcj-2f3m <p>A flaw was found in GNOME localsearch (previously known as tracker-miners) MP3 Extractor, specifically within the tracker-extract-mp3 component. This heap buffer overflow vulnerability occurs when processing specially crafted MP3 files containing malformed ID3v2.3 COMM (Comment) tags. An attacker could exploit this by providing a malicious MP3 file, leading to a denial of service (DoS), which causes an application crash, and potentially disclosing sensitive information from the heap memory.</p> <p>A flaw was found in GNOME localsearch (previously known as tracker-miners) MP3 Extractor, specifically within the tracker-extract-mp3 component. This heap buffer overflow vulnerability occurs when processing specially crafted MP3 files containing malformed ID3v2.3 COMM (Comment) tags. An attacker could exploit this by providing a malicious MP3 file, leading to a denial of service (DoS), which causes an application crash, and potentially disclosing sensitive information from the heap memory.</p> https://cve.radiocsirt.org/vuln/ghsa-4x89-cjcj-2f3m https://cve.radiocsirt.org/vuln/opensuse-su-2026:10162-1 <p>localsearch-3.10.2-2.1 on GA media</p> <p>localsearch-3.10.2-2.1 on GA media</p> https://cve.radiocsirt.org/vuln/opensuse-su-2026:10162-1 https://cve.radiocsirt.org/vuln/suse-su-2026:21854-1 <p>Security update for localsearch</p> <p>Security update for localsearch</p> https://cve.radiocsirt.org/vuln/suse-su-2026:21854-1 https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-1766 <p><strong>Affected:</strong> Ubuntu:18.04:LTS: tracker-miners, Ubuntu:20.04:LTS: tracker-miners, Ubuntu:22.04:LTS: tracker-miners, Ubuntu:24.04:LTS: tracker-miners, Ubuntu:25.10: tracker-miners</p> <p>A flaw was found in GNOME localsearch (previously known as tracker-miners) MP3 Extractor, specifically within the tracker-extract-mp3 component. This heap buffer overflow vulnerability occurs when processing specially crafted MP3 files containing malformed ID3v2.3 COMM (Comment) tags. An attacker could exploit this by providing a malicious MP3 file, leading to a denial of service (DoS), which causes an application crash, and potentially disclosing sensitive information from the heap memory.</p> <p><strong>Affected:</strong> Ubuntu:18.04:LTS: tracker-miners, Ubuntu:20.04:LTS: tracker-miners, Ubuntu:22.04:LTS: tracker-miners, Ubuntu:24.04:LTS: tracker-miners, Ubuntu:25.10: tracker-miners</p> <p>A flaw was found in GNOME localsearch (previously known as tracker-miners) MP3 Extractor, specifically within the tracker-extract-mp3 component. This heap buffer overflow vulnerability occurs when processing specially crafted MP3 files containing malformed ID3v2.3 COMM (Comment) tags. An attacker could exploit this by providing a malicious MP3 file, leading to a denial of service (DoS), which causes an application crash, and potentially disclosing sensitive information from the heap memory.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-1766