https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2026-1767.htmlhttps://patchthecve.com/cve/CVE-2026-1767.htmlWed, 17 Jun 2026 10:16:29 +0000MEDIUM 5.6: A flaw was found in the GNOME localsearch (previously known as tracker-miners) MP3 Extractor `tracker-extract-mp3` component. A remote attacker could exploit this heap buffer overflow vulnerability by providing a specially crafted MP3 file containing malformed ID3 tags. This incorrect length calculahttps://patchthecve.com/cve/CVE-2026-1766.htmlhttps://patchthecve.com/cve/CVE-2026-1766.htmlWed, 17 Jun 2026 10:16:28 +0000MEDIUM 5.6: A flaw was found in GNOME localsearch (previously known as tracker-miners) MP3 Extractor, specifically within the tracker-extract-mp3 component. This heap buffer overflow vulnerability occurs when processing specially crafted MP3 files containing malformed ID3v2.3 COMM (Comment) tags. An attacker cohttps://patchthecve.com/cve/CVE-2026-1764.htmlhttps://patchthecve.com/cve/CVE-2026-1764.htmlThu, 18 Jun 2026 18:27:31 +0000MEDIUM 5.6: A flaw was found in GNOME localsearch (previously known as tracker-miners) MP3 Extractor. When processing specially crafted MP3 files containing ID3v2.4 tags, a missing bounds check in the `extract_performers_tags` function can lead to a heap buffer overflow. This vulnerability allows a remote attac