VULNERABILITY INTELLIGENCE

CVE-2010-2937

CVSS score5 MEDIUM
EPSS probability2.64%
CISA KEVNot currently listed
Published2010-08-20
Last modified2026-06-16
CVSS vectorAV:N/AC:L/Au:N/C:N/I:N/A:P

Description

The ReadMetaFromId3v2 function in taglib.cpp in the TagLib plugin in VideoLAN VLC media player 0.9.0 through 1.1.2 does not properly process ID3v2 tags, which allows remote attackers to cause a denial of service (application crash) via a crafted media file.

Weakness classification

  • CWE-20: Improper Input Validation

Primary references