Search: CVE-2026-1766

CVE-2026-1766 is a heap buffer overflow vulnerability in the GNOME localsearch MP3 Extractor component (tracker-extract-mp3) on Red Hat Enterprise Linux 10. It occurs when processing specially crafted MP3 files with malformed ID3v2.3 COMM tags. Exploitation can cause denial of service via application crash and may lead to disclosure of sensitive heap memory information. The vulnerability has a medium severity with a CVSS score of 5.6. No explicit patch or remediation level is currently provided by Red Hat.