Improper input validation in Scott Wheeler Taglib

CVE-2012-1108

The parse function in ogg/xiphcomment.cpp in TagLib 1.7 and earlier allows remote attackers to cause a denial of service (crash) via a crafted vendorLength field in an ogg file.

Vulnerability class: Drupalgeddon 2 (CVE-2018-7600)

EPSS: 0.031 (86.4th percentile) — read the EPSS interpretation.

Affected products

Weakness classification (CWE)

References