CVE-2026-107390 | Borewit music-metadata up to 11.15.x MP4 parser allocation of resources

October 8, 2026 Yanac

A vulnerability categorized as problematic has been discovered in Borewit music-metadata up to 11.15.x. Affected by this issue is some unknown functionality of the component MP4 parser. Executing a manipulation can lead to allocation of resources.

This vulnerability is registered as CVE-2026-107390. It is possible to launch the attack remotely. No exploit is available.

It is advisable to upgrade the affected component.VulDB Recent EntriesRead More