TagLib QuickTime chapter stsc samples_per_chunk allocation abort via unchecked sample table consistency

Urs Fleisch urs.fleisch at gmail.com
Wed Jul 15 12:32:36 BST 2026


Thanks Brian, for the report and the fix. I have created a pull
request with your fix at https://github.com/taglib/taglib/pull/1379.
Calling this a private channel is debatable as there is a public
archive of this mailing list. You may want to delete or restrict the
Google Drive attachment now, I have all the information, tested and
integrated your fix. Whether we call this a security threat or not, it
is surely a serious bug and it is good that you fixed it, so thanks
again.

Best regards,
Urs


More information about the taglib-devel mailing list