CVE-2024-7193: mp3tag — Katalog CVE

csirt@kutim:~/threat-intel/cve/CVE-2024-7193

CVSS 7.8 · High EPSS 0,35%

Kerentanan Uncontrolled Search Path Element pada mp3tag. Skor CVSS 3.1 7.8 (High) menurut NVD.

Deskripsi (NVD)

A vulnerability has been found in Mp3tag up to 3.26d and classified as problematic. This vulnerability affects unknown code in the library tak_deco_lib.dll of the component DLL Handler. The manipulation leads to uncontrolled search path. It is possible to launch the attack on the local host. The exploit has been disclosed to the public and may be used. Upgrading to version 3.26e is able to address this issue. It is recommended to upgrade the affected component. VDB-272614 is the identifier assigned to this vulnerability. NOTE: The vendor was contacted early, responded in a very professional manner and immediately released a fixed version of the affected product.

Rincian

Terbit di NVD: 29 Juli 2024
Terakhir diubah: 17 Juni 2026
Status NVD: Modified
CVSS 3.1: 7.8 (High), sumber NVD
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H · uraikan di kalkulator
Jenis kelemahan (CWE): CWE-427: Uncontrolled Search Path Element
EPSS (30 hari): 0,35% peluang dieksploitasi; lebih tinggi dari 27,1% CVE lain

Produk dan versi terdampak

Vendor	Produk	Versi terdampak
mp3tag	mp3tag	Semua versi sebelum 3.26e

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

https://vuldb.com/?id.272614 advisory pihak ketiga · vdb entry
https://vuldb.com/?submit.379523 advisory pihak ketiga · vdb entry
https://app.any.run/tasks/37401db6-5584-4f21-8cc5-73240c4ea2dc/ exploit
https://community.mp3tag.de/t/mp3tag-development-build-status/455/1 release notes
https://vuldb.com/?ctiid.272614 permissions required · vdb entry

Sumber: NVD · CVE.org · EPSS. Halaman ini disusun otomatis dari data tersebut; pembaruan terakhir 5 Okt 2026, 20:11 WITA. Kalau sistem di Perangkat Daerah memakai produk ini dan butuh bantuan, laporkan lewat kanal pelaporan.