Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
A flaw was found in GNOME localsearch (previously known as tracker-miners) MP3 Extractor, specifically within the tracker-extract-mp3 component. This heap buffer overflow vulnerability occurs when processing specially crafted MP3 files containing malformed ID3v2.3 COMM (Comment) tags. An attacker could exploit this by providing a malicious MP3 file, leading to a denial of service (DoS), which causes an application crash, and potentially disclosing sensitive information from the heap memory.
Priority
LOW
Exploitation
NONE
PoC
YES
Patch
NONE
Momentum
NONE
If you run products in this scope, you should treat this CVE as relevant to your environment.
4 versions affected across 2 products
CVE-2026-1764 - https://gitlab.gnome.org/GNOME/localsearch/-/issues/425 CVE-2026-1765 - https://gitlab.gnome.org/GNOME/localsearch/-/issues/427 CVE-2026-1766 - https://gitlab.gnome.org/GNOME/localsearch/-/issues/428 CVE-2026-1767 - https://gitlab.gnome.org/GNOME/localsearch/-/issues/429
Post summary
The text lists four newly disclosed CVE identifiers for GNOME's localsearch, each with a corresponding GitLab issue link.
4 of 4 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | gnome | localsearch | - | - | - |
| OS | redhat | enterprise_linux | 10.0 | - | - |
| OS | redhat | enterprise_linux | 8.0 | - | - |
| OS | redhat | enterprise_linux | 9.0 | - | - |