Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 3

CVE-2023-47466

taglib: From CVEorg collector

TagLib before 2.0 allows a segmentation violation and application crash during tag writing via a crafted WAV file in which an id3 chunk is the only valid chunk.

CVSS 3.1 · 2.9 Low EPSS < 1% KEV · Not listed
Vendors
Taglib
Products
Taglib
CVE-2017-12678

taglib: Incorrect cast in rebuildAggregateFrames function

In TagLib 1.11.1, the rebuildAggregateFrames function in id3v2framefactory.cpp has a pointer to cast vulnerability, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted audio file.

CVSS 3.1 · 8.8 High EPSS 2.2% KEV · Not listed
Vendors
Debian Taglib
Products
Debian Linux Taglib
CVE-2018-11439

taglib: heap-based buffer over-read via a crafted audio file

The TagLib::Ogg::FLAC::File::scan function in oggflacfile.cpp in TagLib 1.11.1 allows remote attackers to cause information disclosure (heap-based buffer over-read) via a crafted audio file.

CVSS 3.1 · 6.5 Medium EPSS 2.9% KEV · Not listed
Vendors
Debian Redhat Taglib
Products
Debian Linux Enterprise Linux Taglib