CVE-2026-1764

Publication date 3 February 2026

Last updated 19 June 2026

Ubuntu priority

Medium

Why this priority?

Cvss 3 Severity Score

5.6 · Medium

Score breakdown

Description

[Heap Buffer Overflow in GNOME localsearch MP3 Extractor]

Read the notes from the security team

Status

Package Ubuntu Release Status
localsearch 26.04 LTS resolute
Not affected
25.10 questing Not in release
24.04 LTS noble Not in release
22.04 LTS jammy Not in release
tracker-miners 26.04 LTS resolute Not in release
25.10 questing
Fixed 3.8.2-4ubuntu2.1
24.04 LTS noble
Fixed 3.7.1-1ubuntu0.1
22.04 LTS jammy
Fixed 3.3.3-0ubuntu0.20.04.4
20.04 LTS focal
Vulnerable
18.04 LTS bionic
Vulnerable

Notes

mdeslaur

There is another commit that didn't get a CVE but should be added to updates: https://gitlab.gnome.org/GNOME/localsearch/-/issues/426 https://gitlab.gnome.org/GNOME/localsearch/-/commit/2da6a9442f09b2d83e5c508a4161a6aa586c5598

Patch details

For informational purposes only. We recommend not to cherry-pick updates. How can I get the fixes?

Package Patch details
localsearch
tracker-miners

Severity score breakdown

CVSS version: CVSS v3.0

Base score 5.6 · Medium

Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:N/A:H

References

Related Ubuntu Security Notices (USN)

    • USN-8019-1
    • tracker-miners vulnerabilities
    • 5 February 2026

Other references

Access our resources on patching vulnerabilities