CVE-2023-47466: Taglib

High severity, CVSS 7.1. EPSS: 0.3% chance of exploitation in the next 30 days.

TagLib before 2.0 allows a segmentation violation and application crash during tag writing via a crafted WAV file in which an id3 chunk is the only valid chunk.

Affected products

• Taglib Taglib: before 2.0 (fixed in 2.0)

Published 2025-05-22. Last modified 2026-06-17.