Filtered by vendor Taglib
Subscribe
Total
2 CVE
CVE | Vendors | Products | Updated | CVSS v2 | CVSS v3 |
---|---|---|---|---|---|
CVE-2018-11439 | 2 Debian, Taglib | 2 Debian Linux, Taglib | 2024-11-21 | 4.3 MEDIUM | 6.5 MEDIUM |
The TagLib::Ogg::FLAC::File::scan function in oggflacfile.cpp in TagLib 1.11.1 allows remote attackers to cause information disclosure (heap-based buffer over-read) via a crafted audio file. | |||||
CVE-2017-12678 | 2 Debian, Taglib | 2 Debian Linux, Taglib | 2024-11-21 | 6.8 MEDIUM | 8.8 HIGH |
In TagLib 1.11.1, the rebuildAggregateFrames function in id3v2framefactory.cpp has a pointer to cast vulnerability, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted audio file. |