{"id":"CVE-2017-12678","details":"In TagLib 1.11.1, the rebuildAggregateFrames function in id3v2framefactory.cpp has a pointer to cast vulnerability, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted audio file.","modified":"2026-05-13T12:00:50.097804101Z","published":"2017-08-08T01:34:00.080Z","related":["openSUSE-SU-2024:11421-1"],"database_specific":{"unresolved_ranges":[{"cpe":"cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*","extracted_events":[{"last_affected":"9.0"}],"source":"CPE_FIELD"}]},"references":[{"type":"ADVISORY","url":"https://lists.debian.org/debian-lts-announce/2021/09/msg00020.html"},{"type":"FIX","url":"https://github.com/taglib/taglib/commit/cb9f07d9dcd791b63e622da43f7b232adaec0a9a"},{"type":"FIX","url":"https://github.com/taglib/taglib/issues/829"},{"type":"FIX","url":"https://github.com/taglib/taglib/pull/831"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://github.com/taglib/taglib","events":[{"introduced":"0"},{"last_affected":"e36a9cabb9882e61276161c23834d966d62073b7"}],"database_specific":{"extracted_events":[{"introduced":"0"},{"last_affected":"1.11.1"}],"source":"CPE_FIELD","cpe":"cpe:2.3:a:taglib:taglib:1.11.1:*:*:*:*:*:*:*"}}],"versions":["v1.11.1","v1.11","v1.11beta2","v1.11beta","v1.10","v1.10beta","v1.9.1","v1.9","v1.8beta","v1.7rc1","v1.6.3","v1.6.2","v1.6.1","v1.6","v1.6rc1","v1.5"],"database_specific":{"source":"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2017-12678.json"}}],"schema_version":"1.7.5","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H"}]}