Note:
This project will be discontinued after December 13, 2021. [more]
2017-07-31
The id3_ucs4_length function in ucs4.c in libid3tag 0.15.1b allows remote attackers to cause a denial of service (NULL Pointer Dereference and application crash) via a crafted mp3 file.
| Products | Libid3tag |
| Type | NULL Pointer Dereference (CWE-476) |
| First patch | - None (likely due to unavailable code) |
| Links | http://seclists.org/fulldisclosure/2017/Jul/85 |