Approved changes feed: RSS · Atom

cpe:2.3:a:underbit:libid3tag:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorUnderbit (821e3e3c-0aa7-5320-9916-11a7b037c0e7)
ProductLibid3Tag (8b8416fa-cf9d-55cc-a906-26711774bb73)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:deb/debian/libid3tag purl2cpe 2026-06-01 10:15:14.060523
pkg:deb/ubuntu/libid3tag purl2cpe 2026-06-01 10:15:14.060526
pkg:github/tenacityteam/libid3tag purl2cpe 2026-06-01 10:15:14.060529
pkg:rpm/centos/libid3tag purl2cpe 2026-06-01 10:15:14.060532
pkg:rpm/fedora/libid3tag purl2cpe 2026-06-01 10:15:14.060535
pkg:rpm/opensuse/libid3tag purl2cpe 2026-06-01 10:15:14.060537
pkg:sourceforge/mad purl2cpe 2026-06-01 10:15:14.060540

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2004-2779 vulnerable 2026-06-08 04:48:10.950703 Details available
id3_utf16_deserialize() in utf16.c in libid3tag through 0.15.1b misparses ID3v2 tags encoded in UTF-16 with an odd number of bytes, triggering an endless loop allocating memory until an OOM condition is reached, leading to denial-of-service (DoS).
Published: 2018-02-20T21:00:00.000Z
Updated: 2024-09-17T01:15:33.364Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.