libid3tag Project libid3tag 0.15.1b

Submit a proposal Propose CVE/GCVE/GHSA reference

Approved changes feed: RSS · Atom

cpe:2.3:a:libid3tag_project:libid3tag:0.15.1b:*:*:*:*:*:*:*

part: a version: 0.15.1b update: *

VendorLibid3Tag Project (a2704863-5459-5b24-849f-eee7745d6508)
ProductLibid3Tag (29e032e0-b948-5702-8466-c272ea0079b7)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:deb/debian/libid3tag purl2cpe 2026-06-01 10:12:13.960726
pkg:deb/ubuntu/libid3tag purl2cpe 2026-06-01 10:12:13.960727
pkg:github/sklvjz/mad purl2cpe 2026-06-01 10:12:13.960729
pkg:github/tenacityteam/libid3tag purl2cpe 2026-06-01 10:12:13.960730
pkg:rpm/fedora/libid3tag purl2cpe 2026-06-01 10:12:13.960731
pkg:rpm/opensuse/libid3tag purl2cpe 2026-06-01 10:12:13.960733
pkg:sourceforge/mad purl2cpe 2026-06-01 10:12:13.960734

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2017-11551 vulnerable 2026-06-08 05:08:38.118910 Details available
The id3_field_parse function in field.c in libid3tag 0.15.1b allows remote attackers to cause a denial of service (OOM) via a crafted MP3 file.
Published: 2017-07-31T13:00:00.000Z
Updated: 2024-08-05T18:12:40.318Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-11550 vulnerable 2026-06-08 05:08:38.118520 Details available
The id3_ucs4_length function in ucs4.c in libid3tag 0.15.1b allows remote attackers to cause a denial of service (NULL Pointer Dereference and application crash) via a crafted mp3 file.
Published: 2017-07-31T13:00:00.000Z
Updated: 2024-08-05T18:12:40.350Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.