GLSA-202401-13 : FAAD2: Multiple Vulnerabilities

The remote host is affected by the vulnerability described in GLSA-202401-13 FAAD2: Multiple Vulnerabilities - Buffer Overflow vulnerability infaad2 v.2.10.1 allows a remote attacker to execute arbitrary code and cause a denial of service via the stcoin function in mp4read.c. CVE-2023-38857 -...

CVE-2023-38858

Buffer Overflow vulnerability infaad2 v.2.10.1 allows a remote attacker to execute arbitrary code and cause a denial of service via the mp4info function in mp4read.c:1039...

CVE-2023-38858

FAAD2 (v2.10.1) is affected by a Buffer Overflow via the mp4read.c:1039 path in the mp4info function, enabling remote code execution and a denial of service. Public references across multiple feeds confirm the CVE-2023-38858 issue; Gentoo GLSA 202401-13 recommends upgrading to faad2-2.11.0 or lat...