CVE-2021-32276

An issue was discovered in faad2 through 2.10.0. A NULL pointer dereference exists in the function getsample located in output.c. It allows an attacker to cause Denial of Service...

CVE-2021-32274

An issue was discovered in faad2 through 2.10.0. A heap-buffer-overflow exists in the function sbrqmfsynthesis64 located in sbrqmf.c. It allows an attacker to cause code Execution...

CVE-2021-32273

An issue was discovered in faad2 through 2.10.0. A stack-buffer-overflow exists in the function ftypin located in mp4read.c. It allows an attacker to cause Code Execution...

CVE-2021-32278

CVE-2021-32278 affects FAAD2 up to version 2.10.0, with a heap-buffer-overflow in lt_prediction (lt_predict.c) that can lead to code execution. Connected bulletins confirm the issue and link it to FAAD2 across multiple distributions. Advisories (Debian DSA-5109, Debian DLA-2792, Ubuntu USN-6313-1...

CVE-2021-32273

FAAD2

CVE-2021-32278

An issue was discovered in faad2 through 2.10.0. A heap-buffer-overflow exists in the function ltprediction located in ltpredict.c. It allows an attacker to cause code Execution...

CVE-2021-32273

An issue was discovered in faad2 through 2.10.0. A stack-buffer-overflow exists in the function ftypin located in mp4read.c. It allows an attacker to cause Code Execution...

CVE-2021-32273

An issue was discovered in faad2 through 2.10.0. A stack-buffer-overflow exists in the function ftypin located in mp4read.c. It allows an attacker to cause Code Execution...

CVE-2021-32278

An issue was discovered in faad2 through 2.10.0. A heap-buffer-overflow exists in the function ltprediction located in ltpredict.c. It allows an attacker to cause code Execution...

CVE-2021-32278

An issue was discovered in faad2 through 2.10.0. A heap-buffer-overflow exists in the function ltprediction located in ltpredict.c. It allows an attacker to cause code Execution...

Faad2 代码问题漏洞

Faad2 is a freeware Advanced Audio Aac decoder. It is used for Sbr decoding. A code issue vulnerability exists in faad2 that arises from a reference to freed memory in the getsample function in the product output.c file. An attacker could cause a denial of service via this vulnerability. The...

Faad2 缓冲区错误漏洞

Faad2 is a freeware Advanced Audio Aac decoder. It is used for Sbr decoding. A buffer error vulnerability exists in faad2 that stems from the failure of the sbrqmfanalysis32 function in the product sbrqmf.c file to properly handle data boundaries. An attacker could cause code execution via this...

CVE-2021-26567

Stack-based buffer overflow vulnerability in frontend/main.c in faad2 before 2.2.7.1 allow local attackers to execute arbitrary code via filename and pathname options...

CVE-2021-26567

Stack-based buffer overflow vulnerability in frontend/main.c in faad2 before 2.2.7.1 allow local attackers to execute arbitrary code via filename and pathname options...

Stack overflow

Stack-based buffer overflow vulnerability in frontend/main.c in faad2 before 2.2.7.1 allow local attackers to execute arbitrary code via filename and pathname options...

CVE-2021-26567

Stack-based buffer overflow vulnerability in frontend/main.c in faad2 before 2.2.7.1 allow local attackers to execute arbitrary code via filename and pathname options...

CVE-2021-26567

Summary: CVE-2021-26567 is a stack-based buffer overflow in the FAAD2 decoder (frontend/main.c) of faad2 prior to 2.2.7.1. The vulnerability allows a local attacker to execute arbitrary code via crafted filename and pathname options. Affected context is mainly Synology DiskStation Manager (faad2 ...

CVE-2021-26567

Stack-based buffer overflow vulnerability in frontend/main.c in faad2 before 2.2.7.1 allow local attackers to execute arbitrary code via filename and pathname options...

PT-2021-6549 · Faad2 +4 · Faad2 +4

Name of the Vulnerable Software and Affected Versions: faad2 versions prior to 2.10.0 Description: A heap-buffer-overflow issue exists in the stszin function located in mp4read.c, allowing an attacker to cause code execution. This issue can be exploited by a remote attacker to access confidential...

PT-2020-6624 · Faad2 +4 · Faad2 +4

Name of the Vulnerable Software and Affected Versions: FAAD2 versions through 2.10.0 Description: The issue is related to a heap-buffer-overflow in the lt prediction function located in lt predict.c of the FAAD2 audio decoder. This allows a remote attacker to access confidential data, compromise...