{"id":"CVE-2023-47466","aliases":["AZL-62441","AZL-64466","CLSA-2025-1754552791","CLSA-2026-1777540469","CLSA-2026-1778161748","CLSA-2026-1791301913","DEBIAN-CVE-2023-47466","DLA-4450-1","EUVD-2023-51578","GHSA-63jr-j347-v237","OESA-2025-1638","ROOT-OS-DEBIAN-12-CVE-2023-47466","SUSE-SU-2025:4501-1","UBUNTU-CVE-2023-47466"],"status":"published","title":"TagLib before 2.0 allows a segmentation violation and application crash during tag writing via a...","description":"TagLib before 2.0 allows a segmentation violation and application crash during tag writing via a crafted WAV file in which an id3 chunk is the only valid chunk.","severity":{"version":"3.1","score":2.9,"vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","level":"low","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-11","score":0.00325,"percentile":0.25937,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-476"],"published":"2025-05-22T00:00:00Z","modified":"2026-11-05T05:36:30Z","fixes":[{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"taglib","fixed_in":["1.12-6.el9.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"taglib-devel","fixed_in":["1.12-6.el9.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.6","package":"taglib","fixed_in":["1.12-6.el9.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.6","package":"taglib-devel","fixed_in":["1.12-6.el9.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:7","package":"taglib","fixed_in":["1.8-8.20130218git.el7.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:7","package":"taglib-devel","fixed_in":["1.8-8.20130218git.el7.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:7","package":"taglib-doc","fixed_in":["1.8-8.20130218git.el7.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:18.04","package":"libtag1-dev","fixed_in":["1.11.1+dfsg.1-0.2build2+tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:18.04","package":"libtag1-doc","fixed_in":["1.11.1+dfsg.1-0.2build2+tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:18.04","package":"libtag1v5","fixed_in":["1.11.1+dfsg.1-0.2build2+tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:18.04","package":"libtag1v5-vanilla","fixed_in":["1.11.1+dfsg.1-0.2build2+tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:18.04","package":"libtagc0","fixed_in":["1.11.1+dfsg.1-0.2build2+tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:18.04","package":"libtagc0-dev","fixed_in":["1.11.1+dfsg.1-0.2build2+tuxcare.els1"],"sources":["osv"]},{"ecosystem":"Debian:12","package":"taglib","fixed_in":["1.13-2+deb12u1"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"taglib","fixed_in":["2.0.2-1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"taglib","fixed_in":["2.0.2-1"],"sources":["osv"]},{"ecosystem":"Debian:11","package":"taglib","fixed_in":["1.11.1+dfsg.1-3+deb11u1"],"sources":["osv"]},{"ecosystem":"openEuler:20.03-LTS-SP4","package":"taglib","fixed_in":["1.11.1-13.oe2003sp4"],"sources":["osv"]},{"ecosystem":"openEuler:22.03-LTS-SP3","package":"taglib","fixed_in":["1.11.1-13.oe2203sp3"],"sources":["osv"]},{"ecosystem":"openEuler:22.03-LTS-SP4","package":"taglib","fixed_in":["1.11.1-13.oe2203sp4"],"sources":["osv"]},{"ecosystem":"openEuler:24.03-LTS","package":"taglib","fixed_in":["1.13.1-2.oe2403sp1"],"sources":["osv"]},{"ecosystem":"openEuler:24.03-LTS-SP1","package":"taglib","fixed_in":["1.13.1-2.oe2403sp1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP7","package":"taglib","fixed_in":["1.13.1-150600.3.3.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Desktop Applications 15 SP7","package":"taglib","fixed_in":["1.13.1-150600.3.3.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Package Hub 15 SP7","package":"taglib","fixed_in":["1.13.1-150600.3.3.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap 15.6","package":"taglib","fixed_in":["1.13.1-150600.3.3.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap 15.6","package":"taglib-tests","fixed_in":["1.13.1-150600.3.3.1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Azure Linux:3","package":"taglib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"last_affected":"1.13.1-1"}]}]},{"source":"osv","ecosystem":"Azure Linux:2","package":"taglib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"last_affected":"1.13.1-1"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"taglib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.12-6.el9.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"taglib-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.12-6.el9.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"taglib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.12-6.el9.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"taglib-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.12-6.el9.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:7","package":"taglib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8-8.20130218git.el7.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:7","package":"taglib-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8-8.20130218git.el7.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:7","package":"taglib-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8-8.20130218git.el7.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"libtag1-dev","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.11.1+dfsg.1-0.2build2+tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"libtag1-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.11.1+dfsg.1-0.2build2+tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"libtag1v5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.11.1+dfsg.1-0.2build2+tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"libtag1v5-vanilla","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.11.1+dfsg.1-0.2build2+tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"libtagc0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.11.1+dfsg.1-0.2build2+tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"libtagc0-dev","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.11.1+dfsg.1-0.2build2+tuxcare.els1"}]}]},{"source":"osv","ecosystem":"Debian:12","package":"taglib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.13-2+deb12u1"}]}],"versions":["1.13-2"]},{"source":"osv","ecosystem":"Debian:13","package":"taglib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.2-1"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"taglib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.2-1"}]}]},{"source":"osv","ecosystem":"Debian:11","package":"taglib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.11.1+dfsg.1-3+deb11u1"}]}],"versions":["1.11.1+dfsg.1-3"]},{"source":"osv","ecosystem":"openEuler:20.03-LTS-SP4","package":"taglib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.11.1-13.oe2003sp4"}]}]},{"source":"osv","ecosystem":"openEuler:22.03-LTS-SP3","package":"taglib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.11.1-13.oe2203sp3"}]}]},{"source":"osv","ecosystem":"openEuler:22.03-LTS-SP4","package":"taglib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.11.1-13.oe2203sp4"}]}]},{"source":"osv","ecosystem":"openEuler:24.03-LTS","package":"taglib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.13.1-2.oe2403sp1"}]}]},{"source":"osv","ecosystem":"openEuler:24.03-LTS-SP1","package":"taglib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.13.1-2.oe2403sp1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP7","package":"taglib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.13.1-150600.3.3.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Desktop Applications 15 SP7","package":"taglib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.13.1-150600.3.3.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Package Hub 15 SP7","package":"taglib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.13.1-150600.3.3.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap 15.6","package":"taglib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.13.1-150600.3.3.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap 15.6","package":"taglib-tests","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.13.1-150600.3.3.1"}]}]},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"taglib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.9.1-2.4ubuntu1"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"taglib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.11.1+dfsg.1-0.2","1.11.1+dfsg.1-0.2build1","1.11.1+dfsg.1-0.2build2"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"taglib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.11.1+dfsg.1-0.3","1.11.1+dfsg.1-0.3ubuntu1","1.11.1+dfsg.1-0.3ubuntu2"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"taglib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.11.1+dfsg.1-3ubuntu2","1.11.1+dfsg.1-3ubuntu3"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"taglib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.13.1-1","1.13.1-1build1"]}],"products":[{"vendor":"taglib","product":"taglib"}],"references":[{"url":"https://github.com/taglib/taglib/issues/1163","tags":["exploit","Exploit","Third Party Advisory","report"]},{"url":"https://github.com/taglib/taglib/pull/1164","tags":["Patch","fix","report"]},{"url":"https://github.com/taglib/taglib/compare/v1.13.1...v2.0","tags":["Patch","web","report"]},{"url":"https://github.com/taglib/taglib/commit/dfa33bec0806cbb45785accb8cc6c2048a7d40cf","tags":["Patch","fix"]},{"url":"https://lists.debian.org/debian-lts-announce/2026/01/msg00022.html","tags":["web"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-47466","tags":["web","advisory"]},{"url":"https://github.com/advisories/GHSA-63jr-j347-v237"},{"url":"https://errata.tuxcare.com/els_os/almalinux9.2esu/CLSA-2025-1754552791.html","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/tuxcare9.6esu/CLSA-2026-1777540469.html","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/centos7els/CLSA-2026-1778161748.html","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/ubuntu18.04els/CLSA-2026-1791301913.html","tags":["advisory"]},{"url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/47xxx/CVE-2023-47466.json","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2023-47466","tags":["advisory"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2025-1638","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2025/suse-su-20254501-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1243499","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2023-47466","tags":["web"]},{"url":"https://ubuntu.com/security/CVE-2023-47466","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-47466","tags":["report"]}],"sources":{"cve":[{"id":"CVE-2023-47466","description":"TagLib before 2.0 allows a segmentation violation and application crash during tag writing via a crafted WAV file in which an id3 chunk is the only valid chunk.","status":"published","published":"2025-05-22T00:00:00Z","modified":"2026-01-24T21:03:55.78Z","cvss":[{"version":"3.1","score":2.9,"vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","level":"low","assessor":"cna"}],"cwes":["CWE-476"],"updated_at":"2026-11-02T14:35:14.298866Z"}],"euvd":[{"id":"EUVD-2023-51578","description":"TagLib before 2.0 allows a segmentation violation and application crash during tag writing via a crafted WAV file in which an id3 chunk is the only valid chunk.","status":"published","published":"2025-05-22T00:00:00Z","modified":"2026-01-24T21:03:55Z","cvss":[{"version":"3.1","score":2.9,"vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","level":"low"}],"updated_at":"2026-11-02T19:48:47.68467Z"}],"ghsa":[{"id":"GHSA-63jr-j347-v237","title":"TagLib before 2.0 allows a segmentation violation and application crash during tag writing via a...","description":"TagLib before 2.0 allows a segmentation violation and application crash during tag writing via a crafted WAV file in which an id3 chunk is the only valid chunk.","status":"published","published":"2025-05-22T15:34:50Z","modified":"2026-01-24T21:30:23Z","cvss":[{"version":"3.1","score":2.9,"vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","level":"low"}],"cwes":["CWE-476"],"updated_at":"2026-11-02T15:05:54.187658Z"}],"nvd":[{"id":"CVE-2023-47466","description":"TagLib before 2.0 allows a segmentation violation and application crash during tag writing via a crafted WAV file in which an id3 chunk is the only valid chunk.","status":"published","published":"2025-05-22T14:16:01.743Z","modified":"2026-06-17T06:32:45.827Z","cvss":[{"version":"3.1","score":2.9,"vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","level":"low","assessor":"secondary"},{"version":"3.1","score":7.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H","level":"high","assessor":"primary"}],"cwes":["CWE-476"],"updated_at":"2026-11-02T14:09:21.774456Z"}],"osv":[{"id":"CVE-2023-47466","description":"TagLib before 2.0 allows a segmentation violation and application crash during tag writing via a crafted WAV file in which an id3 chunk is the only valid chunk.","status":"published","published":"2025-05-22T00:00:00Z","modified":"2026-10-28T10:39:19.314710413Z","cvss":[{"version":"3.1","score":2.9,"vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","level":"low"}],"cwes":["CWE-476"],"updated_at":"2026-11-02T15:44:34.287121Z"},{"id":"DEBIAN-CVE-2023-47466","description":"TagLib before 2.0 allows a segmentation violation and application crash during tag writing via a crafted WAV file in which an id3 chunk is the only valid chunk.","status":"published","published":"2025-05-22T14:16:01.743Z","modified":"2026-10-26T18:02:01.562127134Z","cvss":[{"version":"3.1","score":7.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:45:40.275853Z"},{"id":"OESA-2025-1638","title":"taglib security update","description":"TagLib is a library for reading and editing the meta-data of several popular audio formats. Currently it supports both ID3v1 and ID3v2 for MP3 files, Ogg Vorbis comments and ID3 tags and Vorbis comments in FLAC, MPC, Speex, WavPack TrueAudio, WAV, AIFF, MP4 and ASF files.\r\n\r\nSecurity Fix(es):\n\nTagLib before 2.0 allows a segmentation violation and application crash during tag writing via a crafted WAV file in which an id3 chunk is the only valid chunk.(CVE-2023-47466)","status":"published","published":"2025-06-13T11:08:43Z","modified":"2026-08-18T01:18:51.537295056Z","cvss":[{"version":"3.1","score":2.5,"vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L","level":"low"}],"updated_at":"2026-11-02T15:52:42.714349Z"},{"id":"UBUNTU-CVE-2023-47466","description":"TagLib before 2.0 allows a segmentation violation and application crash during tag writing via a crafted WAV file in which an id3 chunk is the only valid chunk.","status":"published","published":"2025-05-22T14:16:00Z","modified":"2026-04-22T14:13:48.895857Z","cvss":[{"version":"3.1","score":2.9,"vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","level":"low"},{"version":"3.1","score":7.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T16:54:23.935133Z"},{"id":"AZL-62441","title":"CVE-2023-47466 affecting package taglib 1.13.1-1","description":"TagLib before 2.0 allows a segmentation violation and application crash during tag writing via a crafted WAV file in which an id3 chunk is the only valid chunk.","status":"published","published":"2025-05-22T14:16:01Z","modified":"2026-11-05T05:36:30Z","updated_at":"2026-11-05T16:41:21.518778Z"},{"id":"AZL-64466","title":"CVE-2023-47466 affecting package taglib 1.13.1-1","description":"TagLib before 2.0 allows a segmentation violation and application crash during tag writing via a crafted WAV file in which an id3 chunk is the only valid chunk.","status":"published","published":"2025-05-22T14:16:01Z","modified":"2026-04-21T04:32:25.693643Z","updated_at":"2026-11-02T15:28:08.076947Z"},{"id":"CLSA-2025-1754552791","title":"taglib: Fix of CVE-2023-47466","description":"- CVE-2023-47466: Fix segmentation violation and application crash during tag\n  writing via crafted WAV file","status":"published","published":"2025-08-07T07:46:35Z","modified":"2026-06-01T00:31:09.651893947Z","updated_at":"2026-11-02T15:43:42.025438Z"},{"id":"CLSA-2026-1777540469","title":"taglib: Fix of CVE-2023-47466","description":"- CVE-2023-47466: Fix segmentation violation and application crash during tag\n  writing via crafted WAV file","status":"published","published":"2026-04-30T09:14:34Z","modified":"2026-06-01T00:32:49.851816839Z","updated_at":"2026-11-02T15:43:44.384419Z"},{"id":"CLSA-2026-1778161748","title":"taglib: Fix of CVE-2023-47466","description":"- CVE-2023-47466: fix segmentation violation and application crash during tag\n  writing via crafted WAV file in which an id3 chunk is the only valid chunk","status":"published","published":"2026-05-08T11:46:38Z","modified":"2026-06-01T00:33:18.787894478Z","updated_at":"2026-11-02T15:43:44.737408Z"},{"id":"CLSA-2026-1791301913","title":"Fix CVE(s): CVE-2023-47466","description":"   * SECURITY UPDATE: crash when writing tags to a crafted WAV file\n     - debian/patches/CVE-2023-47466.patch: return early on an empty chunk\n       list in RIFF::File::updateGlobalSize() (taglib/riff/rifffile.cpp)\n     - CVE-2023-47466","status":"published","published":"2026-10-06T15:52:03Z","modified":"2026-10-26T09:32:04.334334629Z","updated_at":"2026-11-02T15:43:49.016976Z"},{"id":"DLA-4450-1","title":"taglib - security update","status":"published","published":"2026-01-24T00:00:00Z","modified":"2026-01-24T19:29:54.209772Z","updated_at":"2026-11-02T15:46:12.7027Z"},{"id":"ROOT-OS-DEBIAN-12-CVE-2023-47466","title":"CVE-2023-47466 in rootio-taglib - Patched by Root","description":"Root has patched CVE-2023-47466 in the rootio-taglib package for Root:Debian:12. Multiple fixed versions available.","status":"withdrawn","published":"2025-08-12T08:24:43Z","modified":"2026-08-27T14:00:04.41310538Z","updated_at":"2026-11-02T15:53:30.70924Z"},{"id":"SUSE-SU-2025:4501-1","title":"Security update for taglib","description":"This update for taglib fixes the following issues:\n\n- CVE-2023-47466: application crash when processing specially crafted WAV files during tag writing operations\n  (bsc#1243499).\n","status":"published","published":"2025-12-19T17:00:20Z","modified":"2026-03-23T04:51:49.343569Z","updated_at":"2026-11-02T15:54:00.846737Z"}]}}