Résumé
tinytag: Infinite loop when parsing certain M4A files containing invalid atoms
Détails de l’avis
Impact
An M4A file containing a sub-atom with a size of zero in the ---- atom makes the parser enter an infinite loop, resulting in a denial-of-service for programs reading such files with tinytag.
Patches
The issue has been fixed in tinytag 2.3.0, by reusing the primary atom parsing code path that contains appropriate size checks.
Workarounds
No workarounds exist. Users must upgrade to tinytag 2.3.0.
Références
- https://github.com/advisories/GHSA-24cc-9352-h2pg
- https://github.com/tinytag/tinytag/security/advisories/GHSA-24cc-9352-h2pg
- https://nvd.nist.gov/vuln/detail/CVE-2026-104266
- https://github.com/tinytag/tinytag/pull/326
- https://github.com/tinytag/tinytag/commit/9ada221ba44990cb02cd9002d992186e037b515e
- https://github.com/tinytag/tinytag/releases/tag/2.3.0
Vulnérabilités liées
Tout Supply chain →- HIGHCVE-2026-97370
Junrar: RarVM VM_JMP maxOpCount bypass causes infinite CPU loop during RAR4 extraction
- MEDIUMCVE-2026-107391
music-metadata: MP4 stsd sample-entry size==0 causes a synchronous infinite loop (DoS) — unreleased regression on master
- MEDIUMCVE-2026-106121
RabbitMQ: JSONReader in the default JSON-RPC mapper never terminates on truncated input, causing DoS
- MEDIUMCVE-2026-106116
ImageSharp: BigTIFF IFD count can keep a decoder thread in a non-progressing loop
- HIGHGHSA-6w6g-hm98-mhgm
hickory-resolver: Unbounded TC-retry loop in `NameServerPool::try_send` (resource-exhaustion DoS)
- HIGHCVE-2026-19484
@fastify/busboy vulnerable to Denial of Service via oversized multipart boundary