CVE-2026-88365

Name of the Vulnerable Software and Affected Versions minimp3 version ea99364f

Description An integer overflow occurs in the mp3dec skip id3v1() function when the software parses the APEv2 tag-size field. An integer overflow is a condition where an arithmetic operation attempts to create a numeric value that is outside of the range that can be represented with a given number of digits.

Recommendations As a temporary workaround, consider restricting the use of the mp3dec skip id3v1() function until a patch is available.