292 matches found
Astra Linux – Vulnerability in taglib
TagLib before version 2.0 allows a segmentation violation and causes the application to crash during tag writing when a crafted WAV file is used, in which the id3 chunk is the only valid chunk...
CentOS Linux 7 [TuxCare] Security Update: taglib / taglib-devel / taglib-doc (CENTOS7:CLSA-2026:1778161748)
The CentOS Linux 7 host has packages installed that are affected by a vulnerability as referenced in the TuxCare CENTOS7:CLSA-2026:1778161748 advisory. - TagLib before 2.0 allows a segmentation violation and application crash during tag writing via a crafted WAV file in which an id3 chunk is the...
AlmaLinux 9.2 [TuxCare] Security Update: taglib / taglib-devel (ALMALINUX9.2:CLSA-2025:1754552791)
The AlmaLinux 9.2 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.2:CLSA-2025:1754552791 advisory. - TagLib before 2.0 allows a segmentation violation and application crash during tag writing via a crafted WAV file in which an id3 chunk is...
Rocky Linux 9.6 [TuxCare] Security Update: taglib / taglib-devel (ALMALINUX9.6:CLSA-2026:1777540469)
The Rocky Linux 9.6 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1777540469 advisory. - TagLib before 2.0 allows a segmentation violation and application crash during tag writing via a crafted WAV file in which an id3 chunk i...
AlmaLinux 9.6 [TuxCare] Security Update: taglib / taglib-devel (ALMALINUX9.6:CLSA-2026:1777540469)
The AlmaLinux 9.6 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1777540469 advisory. - TagLib before 2.0 allows a segmentation violation and application crash during tag writing via a crafted WAV file in which an id3 chunk is...
kfilemetadata:taglibextractor_fuzzer: Heap-buffer-overflow in TagLib::ID3v2::PopularimeterFrame::rating
Detailed Report: https://oss-fuzz.com/testcase?key=4577269868462080 Project: kfilemetadata Fuzzing Engine: afl Fuzz Target: taglibextractorfuzzer Job Type: aflasankfilemetadata Platform Id: linux Crash Type: Heap-buffer-overflow READ 4 Crash Address: 0x7b727f9e1830 Crash State:...
TagLib DoS
The vulnerability of the library for working with TagLib audio metadata is related to pointer assignment errors. Exploiting this vulnerability can allow an attacker to trigger a service failure using a specially created WAV file...
CLSA-2026-1778161748 taglib: Fix of CVE-2023-47466
CVE-2023-47466: fix segmentation violation and application crash during tag writing via crafted WAV file in which an id3 chunk is the only valid chunk...
Debian: Security Advisory (DLA-4450-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2026 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
[SECURITY] [DLA 4450-1] taglib security update
------------------------------------------------------------------------- Debian LTS Advisory DLA-4450-1 [email protected] https://www.debian.org/lts/security/ Thorsten Alteholz January 24, 2026 https://wiki.debian.org/LTS -...
DLA-4450-1 taglib - security update
Bulletin has no description...
Debian dla-4450 : libtag1-dev - security update
The remote Debian 11 host has packages installed that are affected by a vulnerability as referenced in the dla-4450 advisory. - ------------------------------------------------------------------------- Debian LTS Advisory DLA-4450-1 [email protected] https://www.debian.org/lts/security/...
MiracleLinux 7 : taglib-1.8-8.20130218git.el7 (AXSA:2020-4549:01)
The remote MiracleLinux 7 host has a package installed that is affected by a vulnerability as referenced in the AXSA:2020-4549:01 advisory. taglib: heap-based buffer over-read via a crafted audio file CVE-2018-11439 Tenable has extracted the preceding description block directly from the...
openSUSE Security Advisory (SUSE-SU-2025:4501-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
SUSE SLED15: libtag-devel / libtag-doc / libtag1 / libtag1-32bit / libtag_c0 / etc (SUSE-SU-2025:4501-1)
The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2025:4501-1 advisory. - CVE-2023-47466: application crash when processing specially crafted WAV files during tag writing...
SUSE-SU-2025:4501-1 Security update for taglib
This update for taglib fixes the following issues: - CVE-2023-47466: application crash when processing specially crafted WAV files during tag writing operations bsc1243499...
TencentOS Server 4: taglib (TSSA-2025:0423)
The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2025:0423 advisory. Package updates are available for TencentOS Server 4 that fix the following vulnerabilities:...
TencentOS Server 4: mingw-taglib (TSSA-2025:0471)
The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2025:0471 advisory. Package updates are available for TencentOS Server 4 that fix the following vulnerabilities:...
