The TagLib::Ogg::FLAC::File::scan function in oggflacfile.cpp in TagLib 1.11.1 allows remote attackers to cause information disclosure (heap-based buffer over-read) via a crafted audio file.
CVSS Details
- CVSS 3.1 Base Score: 6.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade taglib | Aug 22, 2024 | May 30, 2018 |
| Amazon Linux Ami 2 | — | Upgrade taglibUpgrade taglib-debuginfoUpgrade taglib-docUpgrade taglib-devel | Jul 21, 2020 | May 30, 2018 |
| Centos_linux | — | Upgrade taglib-debuginfoUpgrade taglibUpgrade taglib-develUpgrade taglib-doc | Apr 1, 2020 | May 30, 2018 |
| Debian | — | Upgrade taglib | Feb 19, 2019 | May 30, 2018 |
| Freebsd | — | Upgrade taglib | May 4, 2020 | May 3, 2020 |
| Huawei Euleros 2_0_sp2 | — | Upgrade taglib | Dec 4, 2019 | May 30, 2018 |
| Huawei Euleros 2_0_sp3 | — | Upgrade taglib | Dec 18, 2019 | May 30, 2018 |
| Huawei Euleros 2_0_sp5 | — | Upgrade taglib | Dec 16, 2020 | May 30, 2018 |
| Huawei Euleros 2_0_sp8 | — | Upgrade taglib | Jun 27, 2019 | May 30, 2018 |
| Oracle Solaris | — | Upgrade communication/im/pidgin to version 2.12.0-11.4.3.0.1.1.0 on Solaris 11.4Upgrade x11/library/libx11 to version 1.6.5-11.4.3.0.1.1.0 on Solaris 11.4Upgrade library/audio/taglib to version 1.11.1-11.4.3.0.1.1.0 on Solaris 11.4Upgrade library/desktop/webkitgtk4 to version 2.20.5-11.4.3.0.1.1.0 on Solaris 11.4 | Nov 19, 2018 | May 30, 2018 |
| Oracle_linux | — | Upgrade taglib-develUpgrade taglibUpgrade taglib-doc | Oct 5, 2022 | May 27, 2018 |
| Redhat_linux | — | No solution existsUpgrade taglibUpgrade taglib-debuginfoUpgrade taglib-develUpgrade taglib-doc | Apr 1, 2020 | May 30, 2018 |
| Suse | — | Upgrade libtag1-32bitUpgrade libtag_c0Upgrade libtag1Upgrade libtag_c0-32bitUpgrade libtag-develUpgrade taglib | Jun 14, 2018 | May 30, 2018 |
| Ubuntu | — | No solution exists | Jun 26, 2025 | May 30, 2018 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub