In GNU Libextractor 1.4, there is a NULL Pointer Dereference in flacmetadata in flacextractor.c.
{ "urgency": "not yet assigned" }