CVE-2012-1584
Integer overflow in the mid function in toolkit/tbytevector.cpp in TagLib 1.7 and earlier allows...
Integer overflow in the mid function in toolkit/tbytevector.cpp in TagLib 1.7 and earlier allows context-dependent attackers to cause a denial of service (application crash) via a crafted file header field in a media file, which triggers a large memory allocation.
Exploit likelihood
What each source reports
NVD Score used
Integer overflow in the mid function in toolkit/tbytevector.cpp in TagLib 1.7 and earlier allows context-dependent attackers to cause a denial of service (application crash) via a crafted file header field in a media file, which triggers a large memory allocation.
- Record
CVE-2012-1584- CVSS 2.0
- 4.3 Medium
AV:N/AC:M/Au:N/C:N/I:N/A:P - Weakness
- CWE-189
- Updated
- 2026-11-02
CVE List No score
Integer overflow in the mid function in toolkit/tbytevector.cpp in TagLib 1.7 and earlier allows context-dependent attackers to cause a denial of service (application crash) via a crafted file header field in a media file, which triggers a large memory allocation.
- Record
CVE-2012-1584- Updated
- 2026-11-02
EUVDEUVD-2012-1601 No score
Integer overflow in the mid function in toolkit/tbytevector.cpp in TagLib 1.7 and earlier allows context-dependent attackers to cause a denial of service (application crash) via a crafted file header field in a media file, which triggers a large memory allocation.
- Record
EUVD-2012-1601- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-cv7h-2qqx-2rrp No score
Integer overflow in the mid function in toolkit/tbytevector.cpp in TagLib 1.7 and earlier allows...
Integer overflow in the mid function in toolkit/tbytevector.cpp in TagLib 1.7 and earlier allows context-dependent attackers to cause a denial of service (application crash) via a crafted file header field in a media file, which triggers a large memory allocation.
- Record
GHSA-cv7h-2qqx-2rrp- Updated
- 2026-11-02
OSV No score
Integer overflow in the mid function in toolkit/tbytevector.cpp in TagLib 1.7 and earlier allows context-dependent attackers to cause a denial of service (application crash) via a crafted file header field in a media file, which triggers a large memory allocation.
- Record
CVE-2012-1584- Updated
- 2026-11-02
OSVDEBIAN-CVE-2012-1584 No score
Integer overflow in the mid function in toolkit/tbytevector.cpp in TagLib 1.7 and earlier allows context-dependent attackers to cause a denial of service (application crash) via a crafted file header field in a media file, which triggers a large memory allocation.
- Record
DEBIAN-CVE-2012-1584- Updated
- 2026-11-02
Affected products
Affected packages
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2012-1584 is a medium vulnerability (CVSS 4.3) in Scott Wheeler Taglib, published September 6, 2012. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 2.65%, the 85th percentile. Fixed in taglib 1.7.1-1.
References
secunia.com/advisories/49688
exchange.xforce.ibmcloud.com/vulnerabilities/78909
securityfocus.com/bid/52290
mail.kde.org/pipermail/taglib-devel/2012-March/002186.html
gentoo.org/security/en/glsa/glsa-201206-16.xml
Show 9 moreShow less
openwall.com/lists/oss-security/2012/03/26/4
github.com/taglib/taglib/commit/dcdf4fd954e3213c355746fa15b7480461972308
nvd.nist.gov/vuln/detail/CVE-2012-1584
security-tracker.debian.org/tracker/CVE-2012-1584