MediaArea

Products

ProductCVEsExploitedLatest
MediaInfoLib4–May 26, 2026
ZenLib1–Jan 7, 2023

Exploited and recent CVEs

  • CVE-2026-25104 High 7.8 A heap-based buffer overflow vulnerability exists in the LXF parsing functionality of MediaInfoLib (version(s): 26.01). A specially crafted .lxf file can lead to arbitrary code execution. An attacker 0.2%
  • CVE-2026-25713 High 7.8 A heap-based buffer overflow vulnerability exists in the ID3v2 parsing functionality of MediaInfoLib (version(s): 26.01). A specially crafted media file that contains ID3v2 tags can lead to arbitrary 0.2%
  • CVE-2026-28764 High 7.8 A heap-based buffer overflow vulnerability exists in the LXF element parsing functionality of MediaInfoLib (version(s): 26.01). A specially crafted .lxf file can lead to arbitrary code execution. An a 0.2%
  • CVE-2026-22554 High 7.8 A heap-based buffer overflow vulnerability exists in the Channel Splitting functionality of MediaInfoLib (version(s): 26.01). A specially crafted .riff file can lead to arbitrary code execution. An at 0.3%
  • CVE-2020-36646 Low 3.5 MediaArea ZenLib Ztring.cpp Date_From_Seconds_1970_Local unknown vulnerability 1.2%