CVE-2026-107391 | Borewit music-metadata up to 11.15.x MP4 stsd sample-description parser StsdAtom.get resource consumption

October 8, 2026 Yanac

A vulnerability labeled as problematic has been found in Borewit music-metadata up to 11.15.x. This vulnerability affects the function StsdAtom.get of the component MP4 stsd sample-description parser. The manipulation results in resource consumption.

This vulnerability is reported as CVE-2026-107391. The attack requires a local approach. No exploit exists.

The affected component should be upgraded.VulDB Recent EntriesRead More