CVE-2026-1767— Localsearch: tracker-miners: gnome localsearch mp3 extractor: heap buffer overflow leading to denial of service or information disclosure via malformed mp3 id3 tags
Quick assessment
Affected
Red Hat Red Hat Enterprise Linux 10
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
GNOME localsearch是GNOME开源的一个文件搜索引擎。 GNOME localsearch存在安全漏洞，该漏洞源于MP3 Extractor tracker-extract-mp3解析标签时长度计算错误，可能导致堆缓冲区溢出、拒绝服务攻击或信息泄露。
Possible ATT&CK Techniques 2 AI
T1059 · Command and Scripting Interpreter T1190 · Exploit Public-Facing ApplicationAffected Version Matrix 3
| Vendor | Product | Version Range | Status |
|---|---|---|---|
| Red Hat | Red Hat Enterprise Linux 10 | any |
affected |
| Red Hat | Red Hat Enterprise Linux 8 | any |
affected |
| Red Hat | Red Hat Enterprise Linux 9 | any |
affected |
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2026-1767
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Localsearch: tracker-miners: gnome localsearch mp3 extractor: heap buffer overflow leading to denial of service or information disclosure via malformed mp3 id3 tags
Source: CVE Program / CVE List V5
Vulnerability Description
A flaw was found in the GNOME localsearch (previously known as tracker-miners) MP3 Extractor `tracker-extract-mp3` component. A remote attacker could exploit this heap buffer overflow vulnerability by providing a specially crafted MP3 file containing malformed ID3 tags. This incorrect length calculation during the parsing of performer tags can lead to a read beyond the allocated buffer, potentially causing a Denial of Service (DoS) due to a crash or enabling information disclosure.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:N/A:H
Source: CVE Program / CVE List V5
Vulnerability Type
使用不正确的长度值访问缓冲区
Source: CVE Program / CVE List V5
Vulnerability Title
GNOME localsearch 安全漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
GNOME localsearch是GNOME开源的一个文件搜索引擎。 GNOME localsearch存在安全漏洞，该漏洞源于MP3 Extractor tracker-extract-mp3解析标签时长度计算错误，可能导致堆缓冲区溢出、拒绝服务攻击或信息泄露。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| Red Hat | Red Hat Enterprise Linux 10 | - |
cpe:/o:redhat:enterprise_linux:10
|
|
| Red Hat | Red Hat Enterprise Linux 8 | - |
cpe:/o:redhat:enterprise_linux:8
|
|
| Red Hat | Red Hat Enterprise Linux 9 | - |
cpe:/o:redhat:enterprise_linux:9
|
|
II. Public POCs for CVE-2026-1767
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2026-1767
请登录查看更多情报信息。
Vendor Advisories for CVE-2026-1767 (1)
Other References for CVE-2026-1767 (1)
Same Patch Batch · Red Hat · 2026-06-16 · 7 CVEs total
| CVE-2026-10649 | 8.6 HIGH | Pacemaker: pacemaker: denial of service via integer overflow in remote message decompressi |
| CVE-2026-12398 | 7.5 HIGH | Galaxy_ng: shell injection in legacy role import via unsanitized git ref names |
| CVE-2026-1766 | 5.6 MEDIUM | Localsearch: tracker-miners: gnome localsearch mp3 extractor: denial of service and inform |
| CVE-2026-1765 | 5.6 MEDIUM | Localsearch: tracker-miners: gnome localsearch mp3 extractor: denial of service and potent |
| CVE-2026-1764 | 5.6 MEDIUM | Localsearch: tracker-miners: gnome localsearch mp3 extractor: heap buffer overflow leads t |
| CVE-2026-4367 | 5.5 MEDIUM | Libxpm: libxpm: denial of service via out-of-bounds read in xpm file parsing |
IV. Related Vulnerabilities
Same product: Red Hat Enterprise Linux 10
-
CVE-2026-19685
Networkmanager: networkmanager: 802-1x ca-path and phase2-ca -
CVE-2026-78367
Rpm: rpmbuild gettarspec() crafted tar member name → macro i -
CVE-2026-73199
Ipa: freeipa: null pointer dereference in `ipa-enrollment` e -
CVE-2026-11861
Freeipa: idm: ipa: freeipa: obtaining tgs with impersonating -
CVE-2026-73198
Ipa: freeipa: unauthenticated dos in `/ipa/i18n_messages` vi
Same vendor: Red Hat
-
CVE-2026-17113
Cri-o: cri-o: unvalidated image env var causes daemon crash -
CVE-2026-78475
Gimp: unbounded stack vla and 21-byte stack over-read in pix -
CVE-2026-78465
Gimp: integer overflow in pcx loader (planes=4) leads to hea -
CVE-2026-19685
Networkmanager: networkmanager: 802-1x ca-path and phase2-ca -
CVE-2026-71366
Awx: notification backends allow ssrf and credential leakage
Same weakness: CWE-805
-
CVE-2026-6695
Gimp: gimp: remote code execution via crafted paa file -
CVE-2026-15028
Libarchive: heap overflow oob read while parsing a tar archi -
CVE-2026-53877
Heap buffer over-read in GDALRaster -
CVE-2026-12549
Libsoup: incomplete fix for cve-2026-2443: range suffix over -
CVE-2026-1766
Localsearch: tracker-miners: gnome localsearch mp3 extractor
V. Comments for CVE-2026-1767
No comments yet