Wind River Support Network

HomeDefectsLIN9-6927
Fixed

LIN9-6927 : Security Advisory - taglib - CVE-2018-11439

Created: May 31, 2018    Updated: May 18, 2019
Resolved Date: Apr 19, 2019
Found In Version: 9.0.0.15
Fix Version: 9.0.0.21
Severity: Standard
Applicable for: Wind River Linux 9
Component/s: Userspace

Description

The TagLib::Ogg::FLAC::File::scan function in oggflacfile.cpp in TagLib 1.11.1 allows remote attackers to cause information disclosure (heap-based buffer over-read) via a crafted audio file.

https://nvd.nist.gov/vuln/detail/CVE-2018-11439

CVEs

Live chat
Online
  • Linkedin
  • Facebook
  • Twitter
  • Youtube