This vulnerability involves a heap-based buffer overflow in the ID3v2 parsing component of MediaInfoLib version 26.01. The flaw allows an attacker with local access and the ability to provide crafted input to cause a buffer overflow, potentially leading to arbitrary code execution or denial of service. The CVSS v3.1 base score is 7.8, indicating a high severity with impact on confidentiality, integrity, and availability. The vulnerability requires low attack complexity but user interaction is needed. No vendor advisory or patch information is currently available.

Successful exploitation could result in complete compromise of the affected system's confidentiality, integrity, and availability due to heap-based buffer overflow. This could allow arbitrary code execution or cause application crashes. However, exploitation requires local access and user interaction, limiting remote attack vectors. No known exploits have been reported in the wild.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, users should limit exposure by restricting local access to trusted users and exercising caution when handling untrusted ID3v2 media files. Monitor vendor channels for updates and apply patches promptly once available.