Taglib · Taglib · CVE-2018-11439
**Name of the Vulnerable Software and Affected Versions**
TagLib version 1.11.1
**Description**
The issue is related to a heap-based buffer over-read in the TagLib::Ogg::FLAC::File::scan function, which can be exploited by remote attackers using a crafted audio file, potentially leading to information disclosure.
**Recommendations**
For TagLib version 1.11.1, consider disabling the `TagLib::Ogg::FLAC::File::scan` function until a patch is available to prevent potential information disclosure.
At the moment, there is no information about a newer version that contains a fix for this vulnerability.