CVE-2026-29508— ReadyMedia 1.3.0 - 1.3.3 Stack Buffer Overflow via DFF Parser

Quick assessment

Affected

ReadyMedia ReadyMedia (MiniDLNA)

Exploitation

No confirmed in-the-wild exploitation; assess based on exposure

Recommended action

Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

ReadyMedia（原 MiniDLNA）1.3.0 至 1.3.3 版本中存在一个基于栈的缓冲区溢出漏洞。攻击者可通过构造恶意 DFF 音频文件，利用其中过大的 PROP 块大小值（该值未经校验即被用于分配可变长度的栈数组，并将文件数据读入该数组），从而破坏栈内存。攻击者可将此类恶意 DFF 文件置于 ReadyMedia 监控的目录中，通过 inotify 机制触发自动解析，进而在未加防护的构建版本中实现远程代码执行，或在启用栈保护等加固措施的构建版本中导致拒绝服务（DoS）。

CVSS 8.8 · High EPSS 0.72% · P54 Updated Nov 03, 2026

Possible ATT&CK Techniques 2 AI

T1203 · Exploitation for Client Execution T1190 · Exploit Public-Facing Application

Affected Version Matrix 1

Vendor	Product	Version Range	Status
ReadyMedia	ReadyMedia (MiniDLNA)	`1.3.0≤ 1.3.3`	affected

Get alerts for future matching vulnerabilities Log in to subscribe

Vulnerability Information

Have questions about the vulnerability? See if Shenlong's analysis helps!

View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title

ReadyMedia 1.3.0 - 1.3.3 Stack Buffer Overflow via DFF Parser

Source: CVE Program / CVE List V5

Vulnerability Description

ReadyMedia (formerly MiniDLNA) versions 1.3.0 through 1.3.3 contain a stack-based buffer overflow vulnerability that allows remote attackers to corrupt stack memory by crafting a malicious DFF audio file with an oversized PROP chunk size value that is used unvalidated to allocate a variable-length stack array and read file data into it. Attackers can place a crafted DFF file in a directory monitored by ReadyMedia to trigger automatic parsing via inotify, achieving remote code execution on unprotected builds or denial of service on hardened builds with stack protections.

Source: CVE Program / CVE List V5

CVSS Information

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Source: CVE Program / CVE List V5

Vulnerability Type

栈缓冲区溢出

Source: CVE Program / CVE List V5

Affected Products

Vendor	Product	Affected Versions	CPE	Subscribe
ReadyMedia	ReadyMedia (MiniDLNA)	1.3.0 ~ 1.3.3	-

II. Public POCs for CVE-2026-29508

#	POC Description	Source Link	Shenlong Link

AI-Generated POC Premium

No public POC found.

III. Intelligence Information for CVE-2026-29508

请登录查看更多情报信息。

Other References for CVE-2026-29508 (1)

ReadyMedia download | SourceForge.net product

Other References for CVE-2026-29508 (3)

https://www.kr3bz.wtf/posts/minidlna-unbounded-vla-to-rce/ technical-description exploit
https://www.asus.com/networking-iot-servers/wifi-routers/asus-gaming-routers/rt-ax86u/helpdesk_bios?model2Name=RT-AX86-Series-RT-AX86U-RT-AX86S patch
https://www.vulncheck.com/advisories/readymedia-stack-buffer-overflow-via-dff-parser third-party-advisory

https://www.cve.org/CVERecord?id=CVE-2026-29508

IV. Related Vulnerabilities

Same weakness: CWE-121