Vulnerabilities

TI-2012-01376 CVE-2012-1584 · GHSA-cv7h-2qqx-2rrp

Integer overflow in the mid function in toolkit/tbytevector.cpp in TagLib 1.7 and earlier…

LOW 25

Integer overflow in the mid function in toolkit/tbytevector.cpp in TagLib 1.7 and earlier allows context-dependent attackers to cause a denial of service (application crash) via a crafted file header field in a media fil…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.02646 Published 2012-09-06 No fix listed CWE-189

TI-2012-01014 CVE-2012-1108 · GHSA-3gr9-x3xp-765c

The parse function in ogg/xiphcomment.cpp in TagLib 1.7 and earlier allows remote…

LOW 26

The parse function in ogg/xiphcomment.cpp in TagLib 1.7 and earlier allows remote attackers to cause a denial of service (crash) via a crafted vendorLength field in an ogg file.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.03103 Published 2012-09-06 Will not fix CWE-20

TI-2012-01013 CVE-2012-1107 · GHSA-9c59-3f2v-28rr

The analyzeCurrent function in ape/apeproperties.cpp in TagLib 1.7 and earlier allows…

LOW 24

The analyzeCurrent function in ape/apeproperties.cpp in TagLib 1.7 and earlier allows context-dependent attackers to cause a denial of service (application crash) via a crafted sampleRate in an ape file, which triggers a…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01827 Published 2012-09-06 No fix listed

Vulnerabilities

Filters

Integer overflow in the mid function in toolkit/tbytevector.cpp in TagLib 1.7 and earlier…

The parse function in ogg/xiphcomment.cpp in TagLib 1.7 and earlier allows remote…

The analyzeCurrent function in ape/apeproperties.cpp in TagLib 1.7 and earlier allows…