A flaw was found in libid3tag. The id3_field_parse function in field.c in libid3tag 0.15.1b can cause a denial of service(OOM) via a crafted mp3 file. References: http://seclists.org/fulldisclosure/2017/Jul/85
Created libid3tag tracking bugs for this issue: Affects: fedora-all [bug 1478940] Created mingw-libid3tag tracking bugs for this issue: Affects: fedora-all [bug 1478941]