Thanks for the report. > - TagLib version/commit tested: 2.0.2 Version 2.0.2 is more than two years old. In the meantime, a lot of issues have been fixed, so could you please verify if the reported vulnerability affects the current version 2.3.2? Best regards, Urs