Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
4.3

TagLib 1.7+ can crash on crafted APE files

CVE-2012-1107 · published 14 years ago
Summary

TagLib, a component many audio programs use to read song information, can stop working if it opens an APE audio file that contains a specially crafted sample‑rate value. The program tries to divide by zero, which makes it crash. Update to the latest TagLib release or avoid opening untrusted APE files until you can upgrade.

What to do
  • Update debian taglib to version 1.7.1-1.
Affected software
Ecosystem VendorProductAffected versions
Debian:12 debian taglib < 1.7.1-1
Fix: upgrade to 1.7.1-1
Debian:13 debian taglib < 1.7.1-1
Fix: upgrade to 1.7.1-1
Debian:14 debian taglib < 1.7.1-1
Fix: upgrade to 1.7.1-1
– scott_wheeler taglib <= 1.7
1.0
1.1
1.2
1.3
1.3.1
1.4
1.5
1.6
1.6.1
1.6.2
1.6.3
cpe:2.3:a:scott_wheeler:taglib:*:*:*:*:*:*:*:*
Original advisory text
The analyzeCurrent function in ape/apeproperties.cpp in TagLib 1.7 and earlier allows context-dependent attackers to cause a denial of service (application crash) via a crafted sampleRate in an ape...
The analyzeCurrent function in ape/apeproperties.cpp in TagLib 1.7 and earlier allows context-dependent attackers to cause a denial of service (application crash) via a crafted sampleRate in an ape file, which triggers a divide-by-zero error.
References
Severity
4.3 Medium
Exploitation
2% chance of attack within 30 days
Timeline
Published6 Sep 2012
Updated3 Nov 2026
First seen5 Sep 2026
Sources
DEBIAN-CVE-2012-1107 · OSV
CVE-2012-1107 · NVD
Track software like this
Free during beta