CVE-2008-2109: Media-Libs LIBID3TAG

Medium severity, CVSS 5.0. EPSS: 7.3% chance of exploitation in the next 30 days.

field.c in the libid3tag 0.15.0b library allows context-dependent attackers to cause a denial of service (CPU consumption) via an ID3_FIELD_TYPE_STRINGLIST field that ends in '\0', which triggers an infinite loop.

Affected products

• Media-Libs LIBID3TAG: version 0.15.0b only

Published 2008-05-07. Last modified 2026-06-16.