FreshPorts - VuXML

This page displays vulnerability information about FreeBSD Ports.

The VUXML data was last processed by FreshPorts on 2024-04-23 14:57:51 UTC

List all Vulnerabilities, by package

List all Vulnerabilities, by date

k68

These are the vulnerabilities relating to the commit you have selected:

VuXML IDDescription
d3f3e818-8d10-11ea-8668-e0d55e2a8bf9taglib -- heap-based buffer over-read via a crafted audio file

Webin security lab - dbapp security Ltd reports:

The TagLib::Ogg::FLAC::File::scan function in oggflacfile.cpp in TagLib 1.11.1 allows remote attackers to cause information disclosure (heap-based buffer over-read) via a crafted audio file.


Discovery 2018-05-28
Entry 2020-05-03
taglib
< 1.12.b.1

https://seclists.org/fulldisclosure/2018/May/49
CVE-2018-11439