OGG: Fix infinite loop

CHANGELOG.md

@@ -10,6 +10,7 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 
 - **ID3v2**: Don't error on empty UTF-16 descriptions ([issue](https://github.com/Serial-ATA/lofty-rs/issues/613)) ([PR](https://github.com/Serial-ATA/lofty-rs/pull/614))
 - **Timestamp**: Only enforce valid year in strict mode ([issue](https://github.com/Serial-ATA/lofty-rs/issues/615)) ([PR](https://github.com/Serial-ATA/lofty-rs/pull/616))
+- **OGG Vorbis**: Fixed potential infinite loop while property reading ([issue](https://github.com/Serial-ATA/lofty-rs/issues/620)) ([PR](https://github.com/Serial-ATA/lofty-rs/pull/622))
 
 ## [0.23.2] - 2026-02-14
 

lofty/src/ogg/mod.rs

@@ -64,6 +64,8 @@ where
 	// the stream should be well below the maximum size.
 	let last_page_header;
 	loop {
+		let current_pos = data.stream_position()?;
+
 		match PageHeader::read(data) {
 			Ok(h) => {
 				last_page_header = h;
@@ -73,6 +75,8 @@ where
 			Err(
 				PageError::MissingMagic | PageError::InvalidVersion | PageError::BadSegmentCount,
 			) => {
+				data.seek(SeekFrom::Start(current_pos))?;
+
 				if !data
 					.rfind(PATTERN)
 					.buffer_size(BUFFER_SIZE)

lofty/tests/fuzz/vorbisfile_read_from.rs

@@ -21,3 +21,11 @@ fn panic1() {
 		crate::get_reader("vorbisfile_read_from/order01d_IDX_32_RAND_22064097693866277502540.ogg");
 	let _ = VorbisFile::read_from(&mut reader, ParseOptions::new());
 }
+
+#[test_log::test]
+fn infinite_loop() {
+	let mut reader = crate::get_reader(
+		"vorbisfile_read_from/order01d_IDX_62_RAND_1029626158139888904228417_minimized_403.ogg",
+	);
+	let _ = VorbisFile::read_from(&mut reader, ParseOptions::new());
+}