The TagLib::Ogg::FLAC::File::scan function in oggflacfile.cpp in TagLib 1.11.1 allows remote attackers to cause information disclosure (heap-based buffer over-read) via a crafted audio file.
CVSS Details
- CVSS 3.1 Base Score: 6.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade taglib | Aug 22, 2024 | May 30, 2018 |
| Amazon Linux Ami 2 | — | Upgrade taglibUpgrade taglib-debuginfoUpgrade taglib-docUpgrade taglib-devel | Jul 21, 2020 | May 30, 2018 |
| Centos_linux | — | Upgrade taglib-develUpgrade taglib-docUpgrade taglib-debuginfoUpgrade taglib | Apr 1, 2020 | May 30, 2018 |
| Debian | — | Upgrade taglib | Feb 19, 2019 | May 30, 2018 |
| Freebsd | — | Upgrade taglib | May 4, 2020 | May 3, 2020 |
| Huawei Euleros 2_0_sp2 | — | Upgrade taglib | Dec 4, 2019 | May 30, 2018 |
| Huawei Euleros 2_0_sp3 | — | Upgrade taglib | Dec 18, 2019 | May 30, 2018 |
| Huawei Euleros 2_0_sp5 | — | Upgrade taglib | Dec 16, 2020 | May 30, 2018 |
| Huawei Euleros 2_0_sp8 | — | Upgrade taglib | Jun 27, 2019 | May 30, 2018 |
| Oracle Solaris | — | Upgrade communication/im/pidgin to version 2.12.0-11.4.3.0.1.1.0 on Solaris 11.4Upgrade library/audio/taglib to version 1.11.1-11.4.3.0.1.1.0 on Solaris 11.4Upgrade library/desktop/webkitgtk4 to version 2.20.5-11.4.3.0.1.1.0 on Solaris 11.4Upgrade x11/library/libx11 to version 1.6.5-11.4.3.0.1.1.0 on Solaris 11.4 | Nov 19, 2018 | May 30, 2018 |
| Oracle_linux | — | Upgrade taglib-develUpgrade taglibUpgrade taglib-doc | Oct 5, 2022 | May 27, 2018 |
| Redhat_linux | — | Upgrade taglib-develUpgrade taglib-docUpgrade taglib-debuginfoNo solution existsUpgrade taglib | Apr 1, 2020 | May 30, 2018 |
| Suse | — | Upgrade taglibUpgrade libtag_c0-32bitUpgrade libtag1Upgrade libtag-develUpgrade libtag1-32bitUpgrade libtag_c0 | Jun 14, 2018 | May 30, 2018 |
| Ubuntu | — | No solution exists | Jun 26, 2025 | May 30, 2018 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub