CVE-2023-47466
HIGH 7.1EPSS 0.3%
TagLib before 2.0 allows a segmentation violation and application crash during tag writing via a crafted WAV file in which an id3 chunk is the only valid chunk.
- Affected
- TagLib
- CVSS v3.1 NVD
- 7.1 HIGH
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H - CVSS v3.1 MITRE
- 2.9 LOW
CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L - EPSS
- 0.33% chance of exploitation in the next 30 days, 24th percentile
- Published
- 2025-05-22
- Updated
- 2026-01-24
Proof-of-concept exploits (1)
- taglib/taglib/issues/11631462★ · 2026-10-17