CVE-2026-88365
minimp3 commit ea99364f contains an integer overflow vulnerability in mp3dec_skip_id3v1() when parsing the APEv2 tag-size field.
- Published Sep 24, 2026
- CVSS 9.8 critical
- 0.4% chance of exploitation in the next 30 days (EPSS)
minimp3 commit ea99364f contains an integer overflow vulnerability in mp3dec_skip_id3v1() when parsing the APEv2 tag-size field.