CVE-2017-12678 | BDVDB-2026-88932 Detail

Description#

In TagLib 1.11.1, the rebuildAggregateFrames function in id3v2framefactory.cpp has a pointer to cast vulnerability, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted audio file.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

https://github.com/taglib/taglib/issues/829
https://github.com/taglib/taglib/pull/831
https://github.com/taglib/taglib/commit/cb9f07d9dcd791b63e622da43f7b232adaec0a9a
https://lists.debian.org/debian-lts-announce/2021/09/msg00020.html

Exploit#

No public exploit known

History#

Version 12017-08-08Record published in the CVE List.
Version 22024-08-05Most recent update recorded in the CVE List.