Confidential Security Report: DoS in TagLib ASF (.wma) handling

Urs Fleisch urs.fleisch at gmail.com
Wed Sep 9 19:06:05 BST 2026


Thanks for the report.

> - TagLib version/commit tested: 2.0.2

Version 2.0.2 is more than two years old. In the meantime, a lot of
issues have been fixed, so could you please verify if the reported
vulnerability affects the current version 2.3.2?

Best regards,
Urs


More information about the taglib-devel mailing list