Read the docs

TagLib

Records3All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high2CVSS 7.0–8.9

Exploited now

TagLib records in CISA KEV

No TagLib vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Records

3 records in Taglib · all components

TI-2023-25666 CVE-2023-47466 · GHSA-63jr-j347-v237

NULL pointer dereference in TagLib

Priority MEDIUM 64

TagLib before 2.0 allows a segmentation violation and application crash during tag writing via a crafted WAV file in which an id3 chunk is the only valid chunk.

CVSS 3.1HIGH 7.1 Local Low privileges No interaction EPSS 0.00325 Published 2025-05-22 Partial fix · 2.0 CWE-476
Priority MEDIUM 42

In TagLib 1.11.1, the rebuildAggregateFrames function in id3v2framefactory.cpp has a pointer to cast vulnerability, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via…

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.02207 Published 2017-08-08 Will not fix CWE-434
Open these records in search →