MediaArea MediaInfoLib contains a heap buffer overflow in the ID3v2 tag parsing routine. The flaw allows an attacker to overflow a buffer that can be used to execute arbitrary code, compromising the confidentiality, integrity, and availability of the affected system. The weakness is a classic buffer overflow (CWE‑122).

This vulnerability affects the MediaArea MediaInfoLib library. Affected versions are not listed in the data, so any installation that uses the library may be at risk unless a patch has been applied.

The CVSS score of 7.8 gives the flaw a high severity rating. EPSS is not available, so the likelihood of exploitation cannot be quantified, but the lack of a KEV listing does not mean the vulnerability is benign. The likely attack vector is any scenario where the library parses media files supplied by an attacker or from an untrusted source. If the library is used in a media player or server that accepts input from the network, remote exploitation is possible; otherwise the risk is limited to local users who can supply malicious media.