CVE-2026-28764

HighCVSS 7.8

Published: 21/05/2026(UTC)Updated: 23/07/2026(UTC)Translated: 25/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.20%

10th percentile - higher than 10% of all known CVEs

Summary

A heap-based buffer overflow vulnerability in the LXF element parser of MediaArea MediaInfoLib, which could be exploited by an attacker to execute arbitrary code remotely or cause application crashes.

Risk Assessment

Risk of remote code execution or application crash, potentially leading to system compromise and data loss.

Recommendation

Update MediaInfoLib to the latest patched version and avoid processing untrusted LXF files.

Other vulnerabilities in MediaArea MediaInfoLib

CVE-2026-22554High
A heap-based buffer overflow vulnerability in the Channel Splitting function of MediaArea MediaInfoLib, which could be exploited by an attacker to execute arbitrary code remotely or cause application crashes.

Original NVD description (English source)

MediaArea MediaInfoLib LXF element parsing heap-based buffer overflow vulnerability