A vulnerability has been found in Mp3tag up to 3.26d and classified as problematic. This vulnerability affects unknown code in the library tak_deco_lib.dll of the component DLL Handler. The manipulation leads to uncontrolled search path.

This vulnerability was named CVE-2024-7193. It is possible to launch the attack on the local host. Furthermore, there is an exploit available.

The vendor was contacted early, responded in a very professional manner and immediately released a fixed version of the affected product.

It is recommended to upgrade the affected component.