{"affected":[{"defaultStatus":"unaffected","product":"ReadyMedia (MiniDLNA)","source":"CNA: VulnCheck","vendor":"ReadyMedia","versions":[{"lessThanOrEqual":"1.3.3","status":"affected","version":"1.3.0","versionType":"semver"}]}],"cveId":"CVE-2026-29508","cwes":["CWE-121"],"description":"ReadyMedia (formerly MiniDLNA) versions 1.3.0 through 1.3.3 contain a stack-based buffer overflow vulnerability that allows remote attackers to corrupt stack memory by crafting a malicious DFF audio file with an oversized PROP chunk size value that is used unvalidated to allocate a variable-length stack array and read file data into it. Attackers can place a crafted DFF file in a directory monitored by ReadyMedia to trigger automatic parsing via inotify, achieving remote code execution on unprotected builds or denial of service on hardened builds with stack protections.","epss":null,"exploits":[{"kind":"exploit","source":"CNA: VulnCheck","url":"https://www.kr3bz.wtf/posts/minidlna-unbounded-vla-to-rce/"}],"kev":null,"metrics":[{"score":8.7,"severity":"high","source":"CNA: VulnCheck","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N","version":"4.0"},{"score":8.8,"severity":"high","source":"CNA: VulnCheck","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","version":"3.1"}],"modifiedAt":1793652849386,"publishedAt":1793651111729,"references":[{"source":"CNA: VulnCheck","tags":["technical-description","exploit"],"url":"https://www.kr3bz.wtf/posts/minidlna-unbounded-vla-to-rce/"},{"source":"CNA: VulnCheck","tags":["patch"],"url":"https://www.asus.com/networking-iot-servers/wifi-routers/asus-gaming-routers/rt-ax86u/helpdesk_bios?model2Name=RT-AX86-Series-RT-AX86U-RT-AX86S"},{"source":"CNA: VulnCheck","tags":["product"],"url":"https://sourceforge.net/projects/minidlna/"},{"source":"CNA: VulnCheck","tags":["third-party-advisory"],"url":"https://www.vulncheck.com/advisories/readymedia-stack-buffer-overflow-via-dff-parser"}],"remediation":[{"kind":"fix","source":"CNA: VulnCheck","text":"The reporting source identifies this reference as a patch. Check the advisory for affected versions and supported release branches.","url":"https://www.asus.com/networking-iot-servers/wifi-routers/asus-gaming-routers/rt-ax86u/helpdesk_bios?model2Name=RT-AX86-Series-RT-AX86U-RT-AX86S"}],"revision":"1c40e88cb0ddee8ef6006ce21281e98e3dde60de4b9f0780808dfd01a9043e6b","sources":[{"modifiedAt":1793652849386,"name":"CNA: VulnCheck","retrievedAt":1793653795711,"url":"https://www.cve.org/CVERecord?id=CVE-2026-29508"}],"ssvc":{"assessedAt":1793652836789,"automatable":"no","exploitation":"poc","source":"ADP: CISA-ADP","technicalImpact":"total"},"status":"published","title":"ReadyMedia 1.3.0 - 1.3.3 Stack Buffer Overflow via DFF Parser","updatedAt":1793653795711}