Skip to content
Noroxi

Borewit records

6 published records for vendor borewit.

Researcher profile

Entered KEV
0 · 0%
Weaponized
0 · 0%
Pre-auth RCE
0
With a fix record
100%
Median publish → KEV
No record has entered KEV

Records by year

  1. 26

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

CWE

Attack profile

All records

6 records
  • CVE-2026-32256
    30Monitor

    music-metadata has an infinite loop vulnerability in ASF parser

    HighCVSS 7.5No exploitEPSS 0%

    borewit · music-metadataMar 18, 2026

  • CVE-2026-107392
    30Monitor

    music-metadata: uncatchable process crash parsing a crafted `.dsf` (residual of CVE-2026-32256)

    HighCVSS 7.5No exploitEPSS 0%

    borewit · music-metadataOct 8, 2026

  • CVE-2026-107390
    30Monitor

    music-metadata: MP4 parser allows memory exhaustion via oversized extended atom length

    HighCVSS 7.5No exploitEPSS 0%

    borewit · music-metadataOct 8, 2026

  • CVE-2026-107391
    30Monitor

    music-metadata: MP4 stsd sample-entry size==0 causes a synchronous infinite loop (DoS) — unreleased regression on master

    HighCVSS 7.5No exploitEPSS 0%

    borewit · music-metadataOct 8, 2026

  • CVE-2026-107387
    22Monitor

    music-metadata: Uncontrolled memory allocation in APEv2 parser

    MediumCVSS 5.5No exploitEPSS 0%

    borewit · music-metadataOct 8, 2026

  • CVE-2026-107388
    22Monitor

    music-metadata: ID3v2 tag size not validated before allocation, causing memory exhaustion DoS

    MediumCVSS 5.5No exploitEPSS 0%

    borewit · music-metadataOct 8, 2026