PT-2026-6839

CVE-2026-1764

Published

2026-01-01

Updated

2026-06-18

Description by

CVSS 3.1

5.6

Medium

MetricsAV:L/AC:L/PR:L/UI:R/S:U/C:L/I:N/A:H

Name of the Vulnerable Software and Affected Versions tracker-miners (affected versions not specified)

Description A flaw exists in tracker-miners related to the handling of malformed MP3 files. This issue could allow an attacker to cause tracker-miners to crash, leading to a denial of service. There is a possibility of arbitrary code execution. The issue is a heap buffer overflow in the GNOME localsearch MP3 extractor.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Impacts

Researchers

Fatih Çelik

Vendors

Affected products

Weakness enumeration

CWE-125: Out-of-bounds Read

Related identifiers

CVE-2026-1764

OPENSUSE-SU-2026:10162-1

SUSE-SU-2026:0780-1