PT-2025-22481 · Taglib+2 · Taglib+2

CVE-2023-47466 · Publicado 2023-11-05 · Atualizado 2026-01-24

Positive Technologies (AI Summary)

CVSS v3.1

7.1

Alta

Vetor base

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H

Name of the Vulnerable Software and Affected Versions TagLib versions prior to 2.0

Description The issue allows a segmentation violation and application crash during tag writing via a crafted WAV file in which an id3 chunk is the only valid chunk.

Recommendations For versions prior to 2.0, update to version 2.0 or later to resolve the issue.

Exploit

Correção

NULL Pointer Dereference

Enumeração de Fraquezas

CWE-476

Identificadores relacionados

ALT-PU-2025-10678

AZL-62441

AZL-64466

BDU:2026-06676

CVE-2023-47466

OESA-2025-1638

SUSE-SU-2025:4501-1

Produtos afetados

Alt Linux

Debian

Taglib

Referências · 29

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/47xxx/CVE-2023-47466.json · Exploit
• 🔥 https://github.com/taglib/taglib/issues/1163 · Exploit
• https://github.com/taglib/taglib/commit/dfa33bec0806cbb45785accb8cc6c2048a7d40cf · Correção
• https://github.com/taglib/taglib/compare/v1.13.1...v2.0 · Correção
• https://github.com/taglib/taglib/pull/1164 · Correção
• https://wiki.astralinux.ru/astra-linux-se17-bulletin-2026-0421SE17 · Aviso do Fabricante
• https://openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2025-1638 · Nota
• https://osv.dev/vulnerability/CVE-2023-47466 · Aviso do Fabricante
• https://twitter.com/CVEnew/status/1925561883844595908 · Publicação no Twitter
• https://t.me/cvenotify/127328 · Publicação no Telegram
• https://osv.dev/vulnerability/OESA-2025-1638 · Aviso do Fabricante
• https://bugzilla.suse.com/1243499 · Nota
• https://osv.dev/vulnerability/UBUNTU-CVE-2023-47466 · Aviso do Fabricante
• https://wiki.astralinux.ru/astra-linux-se47-bulletin-2026-0518SE47 · Aviso do Fabricante
• https://lists.debian.org/debian-lts-announce/2026/01/msg00022.html · Nota