A heap-based buffer overflow vulnerability exists in the LXF element parsing functionality of MediaInfoLib (version(s): 26.01).

Code

The project this record applies to. Exploit listings stay in References.

No public source repository is identified for this product.

Timeline

Detection, updates, and resolution for this record.

1. May 21, 2026 · NIST NVD

   Detected

   A heap-based buffer overflow vulnerability exists in the LXF element parsing functionality of MediaInfoLib (version(s): 26.01). A specially crafted .lxf file can lead to arbitrary code execution. An attacker can provide a malicious file to trigger this vulnerability.

2. Sep 23, 2026 · NIST NVD

   Updated

   A heap-based buffer overflow vulnerability exists in the LXF element parsing functionality of MediaInfoLib (version(s): 26.01). A specially crafted .lxf file can lead to arbitrary code execution. An attacker can provide a malicious file to trigger this vulnerability.

Affected

• cpe mediaarea/mediainfolib26.01

Sources

• CVE.orgVulnerability recordCVE-2026-28764

  Official CVE identifier

  cve.org
• NIST NVDVulnerability recordCVE-2026-28764

  A heap-based buffer overflow vulnerability exists in the LXF element parsing functionality of MediaInfoLib (version(s): 26.01). A specially crafted .lxf file can lead to arbitrary code execution. An attacker can provide a malicious file to trigger this vulnerability.

  nvd.nist.gov

References

• Exploit · talosintelligence.com
• Exploit · talosintelligence.com