music-metadata v11.16.0 Security Advisory: DoS & Validation Bypass Fixes

Vulnerability Overview In version v11.16.0 of the library, several security-related issues were discovered, which could lead to potential security risks. Impact Scope MP4 file processing: Validation of atom sizes prior to payload allocation. APEv2 tag item allocation: Validation of boundary APEv2 tag item allocation. EBML tag length: Validation of EBML tag lengths prior to allocation. sample entry denial of service: Prevention of denial of service via sample entries. ID3v2 tag size: Validation of declared tag sizes prior to allocation. Remediation @Borewit submitted multiple fixes: - Validated MP4 atom sizes before payload allocation (#2746). - Validated boundary APEv2 tag item allocation (#2744). - Validated EBML tag lengths before allocation (#2735). - Prevented denial of service via sample entries (#2734). - Validated ID3v2 tag sizes before allocation (#2743). @MinnieTheMoocher also submitted fixes: - Fixed bug #2736: Skipped BOM in UTF-16 ID3v2 strings (#2737). - Fixed bug #2724: Preserved slashes in ID3v2.2 and ID3v2.3 (#2725). - Fixed bug #2717: Fixed incorrect reading of MP3 ID3v1 track numbers (#2718). - Fixed RIFF INFO decoding defaults to Latin-1 and respected CSET (#2727). - Fixed WM/SharedUserRating decoding to the 0-99 range (#2732). POC Code or Exploit Code No specific POC code or exploit code was provided in the source. Summary Version v11.16.0 of the library resolved potential security issues through multiple security patches, primarily involving the processing of MP4, APEv2, EBML, sample entries, and ID3v2 tags. These fixes, submitted by @Borewit and @MinnieTheMoocher, ensure security when processing multimedia metadata.

Goal Reached Thanks to every supporter — we hit 100%!

music-metadata v11.16.0 Security Advisory: DoS & Validation Bypass Fixes

More from this source