CVE-2006-7075: Aqualung

Medium severity, CVSS 6.8. EPSS: 2% chance of exploitation in the next 30 days.

Buffer overflow in the meta_read_flac function in meta_decoder.c for Aqualung 0.9beta5 and earlier, and CVS 0.193.2 and earlier, allows user-assisted attackers to execute arbitrary code via a long Vorbis comment in a Free Lossless Audio Codec (FLAC) file.

Affected products

• Aqualung Aqualung: version 0.9_beta5 only

Published 2007-03-02. Last modified 2026-06-16.