CVE-2026-1764

Publication date 3 February 2026

Last updated 5 February 2026

Ubuntu priority

Medium

Why this priority?

Description

[Heap Buffer Overflow in GNOME localsearch MP3 Extractor]

Read the notes from the security team

Status

Package Ubuntu Release Status
localsearch 25.10 questing Not in release
24.04 LTS noble Not in release
22.04 LTS jammy Not in release
tracker-miners 25.10 questing
Fixed 3.8.2-4ubuntu2.1
24.04 LTS noble
Fixed 3.7.1-1ubuntu0.1
22.04 LTS jammy
Fixed 3.3.3-0ubuntu0.20.04.4
20.04 LTS focal
Needs evaluation
18.04 LTS bionic
Needs evaluation

Notes

mdeslaur

There is another commit that didn't get a CVE but should be added to updates: https://gitlab.gnome.org/GNOME/localsearch/-/issues/426 https://gitlab.gnome.org/GNOME/localsearch/-/commit/2da6a9442f09b2d83e5c508a4161a6aa586c5598

Patch details

For informational purposes only. We recommend not to cherry-pick updates. How can I get the fixes?

Package Patch details
localsearch

References

Related Ubuntu Security Notices (USN)

    • USN-8019-1
    • tracker-miners vulnerabilities
    • 5 February 2026

Other references