File tracker-miners-CVE-2026-1764.patch of Package tracker-miners
diff -urp tracker-miners-3.6.2.orig/src/tracker-extract/tracker-extract-mp3.c tracker-miners-3.6.2/src/tracker-extract/tracker-extract-mp3.c
--- tracker-miners-3.6.2.orig/src/tracker-extract/tracker-extract-mp3.c 2023-10-31 06:35:32.000000000 -0500
+++ tracker-miners-3.6.2/src/tracker-extract/tracker-extract-mp3.c 2026-02-05 14:18:50.890800100 -0600
@@ -1438,6 +1438,10 @@ extract_performers_tags (id3v2tag *tag,
text_instrument = &data[pos];
text_instrument_len = id3v2_strlen (text_encode, text_instrument, csize - 1);
offset = text_instrument_len + id3v2_nul_size (text_encode);
+
+ if (pos + offset >= csize)
+ break;
+
text_performer = &data[pos + offset];
if (version == 2.4f) {