Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

redhat логотип

CVE-2023-47466

Опубликовано: 22 мая 2025
Источник: redhat
CVSS3: 2.5

Описание

TagLib before 2.0 allows a segmentation violation and application crash during tag writing via a crafted WAV file in which an id3 chunk is the only valid chunk.

A flaw was found in TagLib, a library for reading and editing the metadata of several popular audio formats. TagLib before version 2.0 is subject to a segmentation violation and application crash during tag writing via a crafted WAV file in which an id3 chunk is the only valid chunk.

Затронутые пакеты

ПлатформаПакетСостояниеРекомендацияРелиз
Red Hat Enterprise Linux 10taglibFix deferred
Red Hat Enterprise Linux 6taglibFix deferred
Red Hat Enterprise Linux 7taglibFix deferred
Red Hat Enterprise Linux 8taglibFix deferred
Red Hat Enterprise Linux 9taglibFix deferred

Показывать по

Дополнительная информация

Статус:

Low
Дефект:
CWE-476
https://bugzilla.redhat.com/show_bug.cgi?id=2368007taglib: TagLib segmentation violation

2.5 Low

CVSS3

Связанные уязвимости

CVSS3: 7.1
ubuntu
больше 1 года назад

TagLib before 2.0 allows a segmentation violation and application crash during tag writing via a crafted WAV file in which an id3 chunk is the only valid chunk.

CVSS3: 7.1
nvd
больше 1 года назад

TagLib before 2.0 allows a segmentation violation and application crash during tag writing via a crafted WAV file in which an id3 chunk is the only valid chunk.

CVSS3: 7.1
debian
больше 1 года назад

TagLib before 2.0 allows a segmentation violation and application cras ...

suse-cvrf
11 месяцев назад

Security update for taglib

CVSS3: 2.9
github
больше 1 года назад

TagLib before 2.0 allows a segmentation violation and application crash during tag writing via a crafted WAV file in which an id3 chunk is the only valid chunk.

2.5 Low

CVSS3