CVE-2021-32274

An issue was discovered in faad2 through 2.10.0. A heap-buffer-overflow exists in the function sbrqmfsynthesis64 located in sbrqmf.c. It allows an attacker to cause code Execution...

CVE-2021-32274

FAAD2 (faad2) versions up to 2.10.0 are affected by a heap-buffer-overflow in sbr_qmf_synthesis_64 (sbr_qmf.c), enabling potential code execution. This CVE (CVE-2021-32274) is referenced in multiple advisories (Debian/Ubuntu/DLA/DLA-2792, USN 6313-1) indicating a patch is available in newer faad2...

CVE-2021-32272

CVE-2021-32272 affects FAAD2 up to version 2.10.0. A heap-buffer-overflow in function stszin (mp4read.c) can allow a remote attacker to achieve Code Execution . Affected: faad2 before 2.10.0. Root cause: heap-buffer-overflow in mp4read.c. Impact: code execution. Remediation: upgrade to 2.10.0 or ...

CVE-2021-32276

An issue was discovered in faad2 through 2.10.0. A NULL pointer dereference exists in the function getsample located in output.c. It allows an attacker to cause Denial of Service...

CVE-2021-32272

An issue was discovered in faad2 before 2.10.0. A heap-buffer-overflow exists in the function stszin located in mp4read.c. It allows an attacker to cause Code Execution...

CVE-2021-32273

An issue was discovered in faad2 through 2.10.0. A stack-buffer-overflow exists in the function ftypin located in mp4read.c. It allows an attacker to cause Code Execution...

CVE-2021-32278

An issue was discovered in faad2 through 2.10.0. A heap-buffer-overflow exists in the function ltprediction located in ltpredict.c. It allows an attacker to cause code Execution...

CVE-2021-32278

CVE-2021-32278 affects FAAD2 up to version 2.10.0, with a heap-buffer-overflow in lt_prediction (lt_predict.c) that can lead to code execution. Connected bulletins confirm the issue and link it to FAAD2 across multiple distributions. Advisories (Debian DSA-5109, Debian DLA-2792, Ubuntu USN-6313-1...

CVE-2021-32273

An issue was discovered in faad2 through 2.10.0. A stack-buffer-overflow exists in the function ftypin located in mp4read.c. It allows an attacker to cause Code Execution...

CVE-2021-32278

An issue was discovered in faad2 through 2.10.0. A heap-buffer-overflow exists in the function ltprediction located in ltpredict.c. It allows an attacker to cause code Execution...

CVE-2021-32273

An issue was discovered in faad2 through 2.10.0. A stack-buffer-overflow exists in the function ftypin located in mp4read.c. It allows an attacker to cause Code Execution...

CVE-2021-32273

FAAD2

CVE-2021-32278

An issue was discovered in faad2 through 2.10.0. A heap-buffer-overflow exists in the function ltprediction located in ltpredict.c. It allows an attacker to cause code Execution...

CVE-2021-32276: NULL Pointer Dereference

An issue was discovered in faad2 through 2.10.0. A NULL pointer dereference exists in the function getsample located in output.c. It allows an attacker to cause Denial of Service...

CVE-2021-32277: Out-of-bounds Write

An issue was discovered in faad2 through 2.10.0. A heap-buffer-overflow exists in the function sbrqmfanalysis32 located in sbrqmf.c. It allows an attacker to cause code Execution...

Faad2 代码问题漏洞

Faad2 is a freeware Advanced Audio Aac decoder. It is used for Sbr decoding. A code issue vulnerability exists in faad2 that arises from a reference to freed memory in the getsample function in the product output.c file. An attacker could cause a denial of service via this vulnerability. The...

CVE-2021-32278: Out-of-bounds Write

An issue was discovered in faad2 through 2.10.0. A heap-buffer-overflow exists in the function ltprediction located in ltpredict.c. It allows an attacker to cause code Execution...

CVE-2021-32272: Out-of-bounds Write

An issue was discovered in faad2 before 2.10.0. A heap-buffer-overflow exists in the function stszin located in mp4read.c. It allows an attacker to cause Code Execution...

Faad2 缓冲区错误漏洞

Faad2 is a freeware Advanced Audio Aac decoder. It is used for Sbr decoding. A buffer error vulnerability exists in faad2 that stems from the failure of the sbrqmfanalysis32 function in the product sbrqmf.c file to properly handle data boundaries. An attacker could cause code execution via this...

CVE-2021-32274: Out-of-bounds Write

An issue was discovered in faad2 through 2.10.0. A heap-buffer-overflow exists in the function sbrqmfsynthesis64 located in sbrqmf.c. It allows an attacker to cause code Execution...