CVE-2023-38857
- EPSS 0.5%
- Published 15.08.2023 17:15:11
- Last modified 21.11.2024 08:14:18
Buffer Overflow vulnerability infaad2 v.2.10.1 allows a remote attacker to execute arbitrary code and cause a denial of service via the stcoin function in mp4read.c.
CVE-2023-38858
- EPSS 0.67%
- Published 15.08.2023 17:15:11
- Last modified 21.11.2024 08:14:18
Buffer Overflow vulnerability infaad2 v.2.10.1 allows a remote attacker to execute arbitrary code and cause a denial of service via the mp4info function in mp4read.c:1039.
CVE-2021-32272
- EPSS 0.26%
- Published 20.09.2021 16:15:10
- Last modified 21.11.2024 06:06:56
An issue was discovered in faad2 before 2.10.0. A heap-buffer-overflow exists in the function stszin located in mp4read.c. It allows an attacker to cause Code Execution.
CVE-2021-32273
- EPSS 0.18%
- Published 20.09.2021 16:15:10
- Last modified 21.11.2024 06:06:56
An issue was discovered in faad2 through 2.10.0. A stack-buffer-overflow exists in the function ftypin located in mp4read.c. It allows an attacker to cause Code Execution.
CVE-2021-32274
- EPSS 0.2%
- Published 20.09.2021 16:15:10
- Last modified 21.11.2024 06:06:56
An issue was discovered in faad2 through 2.10.0. A heap-buffer-overflow exists in the function sbr_qmf_synthesis_64 located in sbr_qmf.c. It allows an attacker to cause code Execution.
CVE-2021-32276
- EPSS 0.13%
- Published 20.09.2021 16:15:10
- Last modified 21.11.2024 06:06:56
An issue was discovered in faad2 through 2.10.0. A NULL pointer dereference exists in the function get_sample() located in output.c. It allows an attacker to cause Denial of Service.
CVE-2021-32277
- EPSS 0.2%
- Published 20.09.2021 16:15:10
- Last modified 21.11.2024 06:06:56
An issue was discovered in faad2 through 2.10.0. A heap-buffer-overflow exists in the function sbr_qmf_analysis_32 located in sbr_qmf.c. It allows an attacker to cause code Execution.
CVE-2021-32278
- EPSS 0.2%
- Published 20.09.2021 16:15:10
- Last modified 21.11.2024 06:06:57
An issue was discovered in faad2 through 2.10.0. A heap-buffer-overflow exists in the function lt_prediction located in lt_predict.c. It allows an attacker to cause code Execution.
CVE-2021-26567
- EPSS 1.13%
- Published 26.02.2021 22:15:20
- Last modified 14.01.2025 19:29:55
Stack-based buffer overflow vulnerability in frontend/main.c in faad2 before 2.2.7.1 allow local attackers to execute arbitrary code via filename and pathname options.