PT-2025-22481 · Taglib+2 · Taglib+2

Published 2023-11-05 · Updated 2026-01-24 · CVE-2023-47466

Positive Technologies (AI Summary)

CVSS v3.1

7.1

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H

Name of the Vulnerable Software and Affected Versions TagLib versions prior to 2.0

Description The issue allows a segmentation violation and application crash during tag writing via a crafted WAV file in which an id3 chunk is the only valid chunk.

Recommendations For versions prior to 2.0, update to version 2.0 or later to resolve the issue.

Exploit

Fix

NULL Pointer Dereference

Weakness Enumeration

CWE-476

Related Identifiers

ALT-PU-2025-10678

AZL-62441

AZL-64466

BDU:2026-06676

CVE-2023-47466

OESA-2025-1638

SUSE-SU-2025:4501-1

Affected Products

Alt Linux

Debian

Taglib

References · 28

• 🔥 https://github.com/taglib/taglib/issues/1163 · Exploit
• https://github.com/taglib/taglib/compare/v1.13.1...v2.0 · Patch
• https://github.com/taglib/taglib/pull/1164 · Patch
• https://github.com/taglib/taglib/commit/dfa33bec0806cbb45785accb8cc6c2048a7d40cf · Patch
• https://security-tracker.debian.org/tracker/CVE-2023-47466 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2023-47466 · Vendor Advisory
• https://ubuntu.com/security/CVE-2023-47466 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2023-47466 · Security Note
• https://bdu.fstec.ru/vul/2026-06676 · Security Note
• https://osv.dev/vulnerability/UBUNTU-CVE-2023-47466 · Vendor Advisory
• https://wiki.astralinux.ru/astra-linux-se47-bulletin-2026-0518SE47 · Vendor Advisory
• https://osv.dev/vulnerability/AZL-64466 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-47466 · Security Note
• https://osv.dev/vulnerability/AZL-62441 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2025:4501-1 · Vendor Advisory