Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
id3_utf16_deserialize() in utf16.c in libid3tag through 0.15.1b misparses ID3v2 tags encoded in UTF-16 with an odd number of bytes, triggering an endless loop allocating memory until an OOM condition is reached, leading to denial-of-service (DoS).
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
libid3tag 安全漏洞
Vulnerability Description
libid3tag是MPEG音频解码器MAD中所捆绑的ID3标签操控库。 libid3tag 0.15.1b及之前版本中的utf16.c文件的‘id3_utf16_deserialize()’函数存在安全漏洞，该漏洞源于程序没有正确的解析UTF-16中用奇数位字节编码的ID3v2标签。攻击者可利用该漏洞造成拒绝服务。
CVSS Information
N/A
Vulnerability Type
N/A