CVE-2017-12678

In TagLib 1.11.1, the rebuildAggregateFrames function in id3v2framefactory.cpp has a pointer to cast vulnerability, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted audio file.

• CWE-434

• https://github.com/taglib/taglib/commit/cb9f07d9dcd791b63e622da43f7b232adaec0a9aPatch, Vendor Advisory
• https://github.com/taglib/taglib/issues/829Issue Tracking, Patch, Vendor Advisory
• https://github.com/taglib/taglib/pull/831Patch, Vendor Advisory
• https://lists.debian.org/debian-lts-announce/2021/09/msg00020.htmlMailing List, Third Party Advisory
• https://github.com/taglib/taglib/commit/cb9f07d9dcd791b63e622da43f7b232adaec0a9aPatch, Vendor Advisory
• https://github.com/taglib/taglib/issues/829Issue Tracking, Patch, Vendor Advisory
• https://github.com/taglib/taglib/pull/831Patch, Vendor Advisory
• https://lists.debian.org/debian-lts-announce/2021/09/msg00020.htmlMailing List, Third Party Advisory

Published

Aug 8, 2017

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2017-12672In ImageMagick 7.0.6-3, a memory leak vulnerability was foun…
• CVE-2017-12673In ImageMagick 7.0.6-3, a memory leak vulnerability was foun…
• CVE-2017-12674In ImageMagick 7.0.6-2, a CPU exhaustion vulnerability was f…
• CVE-2017-12675In ImageMagick 7.0.6-3, a missing check for multidimensional…
• CVE-2017-12676In ImageMagick 7.0.6-3, a memory leak vulnerability was foun…
• CVE-2017-12677IdentityServer3 2.4.x, 2.5.x, and 2.6.x before 2.6.1 has XSS…
• CVE-2017-12679SQL Injection exists in NexusPHP 1.5.beta5.20120707 via the …
• CVE-2017-1268IBM Security Guardium 10 and 10.5 uses a one-way cryptograph…5.9
• CVE-2017-12680Cross-Site Scripting (XSS) exists in NexusPHP 1.5 via the ty…
• CVE-2017-1269IBM Security Guardium 10.0 and 10.1 is vulnerable to SQL inj…
• CVE-2017-12691The ReadOneLayer function in coders/xcf.c in ImageMagick 7.0…
• CVE-2017-12692The ReadVIFFImage function in coders/viff.c in ImageMagick 7…