A AegiFlow
CRITICALCVSS 9.8

CVE-2026-88365

CVE-2026-88365 updated by NVD

Modified
2026-09-30
Sources
nvd

Summary

minimp3 commit ea99364f contains an integer overflow vulnerability in mp3dec_skip_id3v1() when parsing the APEv2 tag-size field.

References

Includes data from the National Vulnerability Database (NIST). NVD data is in the public domain; this page is not endorsed by NIST.

CVE® is a registered trademark of The MITRE Corporation. CVE content reproduced under the CVE Terms of Use; copyright designation © MITRE.