alpine · CVE-2023-47466

Quick triage

Priority: not assigned Published: Updated:

View at Official alpine advisory, NVD, CVE.org · CVE detail

Freshness: no update timestamp found; verify against the upstream OS advisory manually.

Tracker summary

CVE-2023-47466: 1 source package rows (taglib); 4 state rows across 2 repos (3.22-community, edge-community); fixed 0, open 4.

Description:

TagLib before 2.0 allows a segmentation violation and application crash during tag writing via a crafted WAV file in which an id3 chunk is the only valid chunk.

cvelogic Threat Intelligence