CVE-2026-1764

Publication date 3 February 2026

Last updated 3 February 2026


Ubuntu priority

Description

[Heap Buffer Overflow in GNOME localsearch MP3 Extractor]

Read the notes from the security team

Status

Package Ubuntu Release Status
localsearch 25.10 questing Not in release
24.04 LTS noble Not in release
22.04 LTS jammy Not in release
tracker-miners 25.10 questing
Vulnerable
24.04 LTS noble
Vulnerable
22.04 LTS jammy
Vulnerable
20.04 LTS focal
Needs evaluation
18.04 LTS bionic
Needs evaluation

Notes


mdeslaur

There is another commit that didn't get a CVE but should be added to updates: https://gitlab.gnome.org/GNOME/localsearch/-/issues/426 https://gitlab.gnome.org/GNOME/localsearch/-/commit/2da6a9442f09b2d83e5c508a4161a6aa586c5598

Patch details

For informational purposes only. We recommend not to cherry-pick updates. How can I get the fixes?

Package Patch details
localsearch