CVE-2026-29508
HIGH
MEDIUM
Priority: 0.06
BB Relevance:
68/100
Published: 2026-11-02
Modified: 2026-11-03
First seen: 2026-11-02
Status: active
Attack Surface
Network
Low Complexity
No Interaction
Conf. Impact
Integ. Impact
CVSS Vector Breakdown
AV:
Network
AC:
Low
PR:
Low
UI:
None
S:
X
AT:
None
VC:
High
VI:
High
VA:
High
Description
ReadyMedia (formerly MiniDLNA) versions 1.3.0 through 1.3.3 contain a stack-based buffer overflow vulnerability that allows remote attackers to corrupt stack memory by crafting a malicious DFF audio file with an oversized PROP chunk size value that is used unvalidated to allocate a variable-length stack array and read file data into it. Attackers can place a crafted DFF file in a directory monitored by ReadyMedia to trigger automatic parsing via inotify, achieving remote code execution on unprotected builds or denial of service on hardened builds with stack protections.
Weakness Classification (1)
Affected Software (2)
| Vendor | Product | Version |
|---|---|---|
| ReadyMedia | ReadyMedia (MiniDLNA) | 1.3.0 |
| ReadyMedia | ReadyMedia (MiniDLNA) | 1.3.0 |
References & Advisories (4)
third-party-advisory
technical-description
exploit
product
patch