2 matches found
PT-2017-3908 · Freeware +1 · Faad2 +1
Name of the Vulnerable Software and Affected Versions: Freeware Advanced Audio Decoder 2 FAAD2 version 2.7 Description: The issue is related to the mp4ff read stco function, which can lead to a denial of service due to excessive CPU consumption caused by a large loop. This can be triggered by a...
PT-2017-3887 · Audiocoding +1 · Faad2 +1
Name of the Vulnerable Software and Affected Versions: FAAD2 version 2.7 Description: The issue is related to the mp4ff read stsc function in the FAAD2 audio decoder, which can cause a buffer overflow in memory. This can be exploited by an attacker using a specially crafted mp4 file, potentially...