CVE-2018-11439: Debian Linux

Medium severity, CVSS 6.5. EPSS: 3% chance of exploitation in the next 30 days.

The TagLib::Ogg::FLAC::File::scan function in oggflacfile.cpp in TagLib 1.11.1 allows remote attackers to cause information disclosure (heap-based buffer over-read) via a crafted audio file.

Affected products

• Debian Debian Linux: version 8.0 only; version 9.0 only
• Taglib Taglib: version 1.11.1 only

Published 2018-05-30. Last modified 2026-06-17.