borewit
5 records · 5 with a public proof-of-concept
Disclosed vulnerabilities where the NVD names borewit as an affected vendor, highest CVSS first.
- MEDIUM 6.2CVE-2026-107392public PoC
music-metadata is a metadata parser for audio and video media files. Prior to 11.15.0, the DSF parser handles an unrecognized chunk by calling tokenizer.ignore without awaiting the returned promise and without first rejecting a chunk size smaller than the 12-b…
music-metadata
- MEDIUM 6.2CVE-2026-107391public PoC
music-metadata is a metadata parser for audio and video media files. In the public development revision introduced after 11.14.0, a development-branch regression in the MP4 stsd sample-description parser allows an attacker-controlled sample-entry size of zero …
music-metadata
- MEDIUM 6.2CVE-2026-107390public PoC
music-metadata is a metadata parser for audio and video media files. Prior to 11.16.0, the MP4 parser accepts an attacker-controlled 64-bit extended atom size, converts it to a JavaScript Number, and uses the resulting payload length for atom-specific readToke…
music-metadata
- MEDIUM 6.2CVE-2026-107388public PoC
music-metadata is a metadata parser for audio and video media files. Prior to 11.16.0, the ID3v2 parser trusts the syncsafe tag-size field and allocates the complete tag body before checking whether the input contains the declared bytes. A truncated file conta…
music-metadata
- MEDIUM 6.2CVE-2026-107387public PoC
music-metadata is a metadata parser for audio and video media files. Prior to 11.16.0, the APEv2 parser reads an attacker-controlled tag-item size and allocates a Uint8Array for a binary item before proving that the declared item fits in the remaining tag or f…
music-metadata