Low severity2.9NVD Advisory· Published May 22, 2025· Updated Jun 17, 2026
CVE-2023-47466
CVE-2023-47466
Description
TagLib before 2.0 allows a segmentation violation and application crash during tag writing via a crafted WAV file in which an id3 chunk is the only valid chunk.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
8- osv-coords5 versionspkg:rpm/suse/taglib&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Basesystem%2015%20SP7pkg:rpm/opensuse/taglib-tests&distro=openSUSE%20Leap%2015.6pkg:rpm/suse/taglib&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Desktop%20Applications%2015%20SP7pkg:rpm/suse/taglib&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Package%20Hub%2015%20SP7pkg:rpm/opensuse/taglib&distro=openSUSE%20Leap%2015.6
< 1.13.1-150600.3.3.1+ 4 more
- (no CPE)range: < 1.13.1-150600.3.3.1
- (no CPE)range: < 1.13.1-150600.3.3.1
- (no CPE)range: < 1.13.1-150600.3.3.1
- (no CPE)range: < 1.13.1-150600.3.3.1
- (no CPE)range: < 1.13.1-150600.3.3.1
Patches
Vulnerability mechanics
References
5- github.com/taglib/taglib/commit/dfa33bec0806cbb45785accb8cc6c2048a7d40cfnvdPatch
- github.com/taglib/taglib/compare/v1.13.1...v2.0nvdPatch
- github.com/taglib/taglib/pull/1164nvdPatch
- github.com/taglib/taglib/issues/1163nvdExploitThird Party Advisory
- lists.debian.org/debian-lts-announce/2026/01/msg00022.htmlnvd
News mentions
0No linked articles in our index yet.