TagLib before 2.0 allows a segmentation violation and application crash during tag writing via a crafted WAV file in which an id3 chunk is the only valid chunk.
References
| Link | Resource |
|---|---|
| https://github.com/taglib/taglib/commit/dfa33bec0806cbb45785accb8cc6c2048a7d40cf | Patch |
| https://github.com/taglib/taglib/compare/v1.13.1...v2.0 | Patch |
| https://github.com/taglib/taglib/issues/1163 | Exploit Third Party Advisory |
| https://github.com/taglib/taglib/issues/1163 | Exploit Third Party Advisory |
| https://github.com/taglib/taglib/pull/1164 | Patch |
Configurations
History
02 Jul 2025, 00:55
| Type | Values Removed | Values Added |
|---|---|---|
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 7.1 |
| First Time |
Taglib
Taglib taglib |
|
| CPE | cpe:2.3:a:taglib:taglib:*:*:*:*:*:*:*:* | |
| References | () https://github.com/taglib/taglib/issues/1163 - Exploit, Third Party Advisory | |
| References | () https://github.com/taglib/taglib/commit/dfa33bec0806cbb45785accb8cc6c2048a7d40cf - Patch | |
| References | () https://github.com/taglib/taglib/pull/1164 - Patch | |
| References | () https://github.com/taglib/taglib/compare/v1.13.1...v2.0 - Patch |
22 May 2025, 15:16
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2025-05-22 14:16
Updated : 2025-07-02 00:55
NVD link : CVE-2023-47466
Mitre link : CVE-2023-47466
JSON object : View
Products Affected
taglib
- taglib
CWE
No CWE.