CLEANSTART-2023-PK70836 TagLib::Ogg::FLAC::File::scan function in oggflacfile

Security vulnerability affects the taglib package. The TagLib::Ogg::FLAC::File::scan function in oggflacfile...

CLEANSTART-2023-DJ98808 In TagLib 1

Security vulnerability affects the taglib package. In TagLib 1...

Rocky Linux 9.6 [CIQ] Security Update: taglib / taglib-devel Multiple Vulnerabilities (ciqsa-2026_1639)

The Rocky Linux 9.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ ciqsa-20261639 advisory. This advisory aggregates security fixes for the taglib SRPM in CIQ LTS 9.6. It addresses 2 CVEs: CVE-2017-12678, CVE-2023-47466. Tenable has extracted th...

CLSA-2026-1791301913 Fix CVE(s): CVE-2023-47466

SECURITY UPDATE: crash when writing tags to a crafted WAV file - debian/patches/CVE-2023-47466.patch: return early on an empty chunk list in RIFF::File::updateGlobalSize taglib/riff/rifffile.cpp - CVE-2023-47466...

AlmaLinux 9.2 [TuxCare] Security Update: taglib / taglib-devel (ALMALINUX9.2:CLSA-2025:1754552791)

The AlmaLinux 9.2 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.2:CLSA-2025:1754552791 advisory. - TagLib before 2.0 allows a segmentation violation and application crash during tag writing via a crafted WAV file in which an id3 chunk is...

CentOS Linux 7 [TuxCare] Security Update: taglib / taglib-devel / taglib-doc (CENTOS7:CLSA-2026:1778161748)

The CentOS Linux 7 host has packages installed that are affected by a vulnerability as referenced in the TuxCare CENTOS7:CLSA-2026:1778161748 advisory. - TagLib before 2.0 allows a segmentation violation and application crash during tag writing via a crafted WAV file in which an id3 chunk is the...

AlmaLinux 9.6 [TuxCare] Security Update: taglib / taglib-devel (ALMALINUX9.6:CLSA-2026:1777540469)

The AlmaLinux 9.6 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1777540469 advisory. - TagLib before 2.0 allows a segmentation violation and application crash during tag writing via a crafted WAV file in which an id3 chunk is...

Rocky Linux 9.6 [TuxCare] Security Update: taglib / taglib-devel (ALMALINUX9.6:CLSA-2026:1777540469)

The Rocky Linux 9.6 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1777540469 advisory. - TagLib before 2.0 allows a segmentation violation and application crash during tag writing via a crafted WAV file in which an id3 chunk i...

kfilemetadata:taglibextractor_fuzzer: Heap-buffer-overflow in TagLib::ID3v2::PopularimeterFrame::rating

Detailed Report: https://oss-fuzz.com/testcase?key=4577269868462080 Project: kfilemetadata Fuzzing Engine: afl Fuzz Target: taglibextractorfuzzer Job Type: aflasankfilemetadata Platform Id: linux Crash Type: Heap-buffer-overflow READ 4 Crash Address: 0x7b727f9e1830 Crash State:...

Astra Linux – vulnerability in taglib

TagLib versions prior to 2.0 allow a segmentation violation and application crash during tag writing when a crafted WAV file is used, in which case the ID3 chunk is the only valid chunk...

TagLib DoS

The vulnerability of the library for working with TagLib audio metadata is related to pointer assignment errors. Exploiting this vulnerability can allow an attacker to trigger a service failure using a specially created WAV file...

CLSA-2026-1778161748 taglib: Fix of CVE-2023-47466

CVE-2023-47466: fix segmentation violation and application crash during tag writing via crafted WAV file in which an id3 chunk is the only valid chunk...

Debian: Security Advisory (DLA-4450-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2026 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] [DLA 4450-1] taglib security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-4450-1 [email protected] https://www.debian.org/lts/security/ Thorsten Alteholz January 24, 2026 https://wiki.debian.org/LTS -...

DLA-4450-1 taglib - security update

Bulletin has no description...

Debian dla-4450 : libtag1-dev - security update

The remote Debian 11 host has packages installed that are affected by a vulnerability as referenced in the dla-4450 advisory. - ------------------------------------------------------------------------- Debian LTS Advisory DLA-4450-1 [email protected] https://www.debian.org/lts/security/...

MiracleLinux 7 : taglib-1.8-8.20130218git.el7 (AXSA:2020-4549:01)

The remote MiracleLinux 7 host has a package installed that is affected by a vulnerability as referenced in the AXSA:2020-4549:01 advisory. taglib: heap-based buffer over-read via a crafted audio file CVE-2018-11439 Tenable has extracted the preceding description block directly from the...

openSUSE Security Advisory (SUSE-SU-2025:4501-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE SLED15: libtag-devel / libtag-doc / libtag1 / libtag1-32bit / libtag_c0 / etc (SUSE-SU-2025:4501-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2025:4501-1 advisory. - CVE-2023-47466: application crash when processing specially crafted WAV files during tag writing...

SUSE-SU-2025:4501-1 Security update for taglib

This update for taglib fixes the following issues: - CVE-2023-47466: application crash when processing specially crafted WAV files during tag writing operations bsc1243499...