CVE-2026-25713

A heap-based buffer overflow vulnerability exists in the ID3v2 parsing functionality of MediaInfoLib (version(s): 26.01). A specially crafted media file that contains ID3v2 tags can lead to arbitrary code execution. An attacker can provide a malicious file to trigger this vulnerability.

• CWE-122

• https://talosintelligence.com/vulnerability_reports/TALOS-2026-2368Exploit, Third Party Advisory
• https://www.talosintelligence.com/vulnerability_reports/TALOS-2026-2368Exploit, Third Party Advisory

Published

May 26, 2026

Last Modified

Sep 23, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-25706Improper neutralization of special elements used in an OS co…7.5
• CVE-2026-25707A relative path traversal bug problem when processing reposi…8.8
• CVE-2026-2571The Download Manager plugin for WordPress is vulnerable to u…4.3
• CVE-2026-25710The new upstream added a privileged D-Bus helper called plas…7
• CVE-2026-25711The WebSocket backend uses charging station identifiers to u…7.5
• CVE-2026-25712Gitea versions before 1.25.5 have insufficient visibility ch…7.5
• CVE-2026-25714Gitea versions up to and including 1.26.1 do not apply publi…4.3
• CVE-2026-25715The web management interface of the device allows the admini…9.8
• CVE-2026-25718Gitea versions before 1.25.5 mishandle path resolution durin…9.1
• CVE-2026-25720A vulnerability exists in SenseLive X3050’s web management …5.4
• CVE-2026-25721An OS command injection vulnerability exists in XWEB Pro ve…8.8
• CVE-2026-25722Claude Code is an agentic coding tool. Prior to version 2.0.…9.1