Fluid Attacks Database

Description

TagLib before 2.0 allows a segmentation violation and application crash during tag writing via a crafted WAV file in which an id3 chunk is the only valid chunk.

Mitigation

Update Impact

Minimal update. May introduce new vulnerabilities or breaking changes.

Ecosystem	Package	Affected version	Patched versions
debian 14	taglib	>=0 <2.0.2-1	2.0.2-1
debian 11	taglib	=1.11.1+dfsg.1-3 \|\| >=0 <1.11.1+dfsg.1-3+deb11u1	1.11.1+dfsg.1-3+deb11u1
debian 12	taglib	=1.13-2 \|\| >=0 <1.13-2+deb12u1	1.13-2+deb12u1
debian 13	taglib	>=0 <2.0.2-1	2.0.2-1
rpm rhel8	taglib	-	-
rpm rhel10	taglib	-	-
rpm rhel6	taglib	-	-
rpm rhel7	taglib	-	-
rpm rhel9	taglib	-	-

Aliases

1. CVE-2023-474662. NVD-2023-474663. OSV-DEBIAN-2023-474664. OSV-2023-474665. SECURITY-TRACKER-CVE-2023-47466

Does your application use this vulnerable software?

During the free trial, our tools assess your application, identify vulnerabilities, and provide recommendations for their remediation.