Summary
It was discovered that FAAD2 incorrectly handled certain inputs. If a user or
an automated system were tricked into opening a specially crafted input file,
a remote attacker could possibly use this issue to execute arbitrary code.
(CVE-2021-32272, CVE-2021-32273, CVE-2021-32274, CVE-2021-32277,
CVE-2021-32278, CVE-2023-38857, CVE-2023-38858)
It was discovered that FAAD2 incorrectly handled certain inputs. If a user or
an automated system were tricked into opening a specially crafted input file,
a remote attacker could possibly use this issue to cause a denial of service.
(CVE-2021-32276)
Fixed packages 4
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 20.04 LTS 20.04:LTS | faad2 | 2.9.1-1ubuntu0.1 |
| Ubuntu · Pro 14.04 LTS Pro:14.04:LTS | faad2 | 2.7-8+deb8u3ubuntu0.1~esm1 |
| Ubuntu · Pro 16.04 LTS Pro:16.04:LTS | faad2 | 2.8.0~cvs20150510-1ubuntu0.1+esm1 |
| Ubuntu · Pro 18.04 LTS Pro:18.04:LTS | faad2 | 2.8.8-1ubuntu0.1~esm1 |
Vulnerabilities 8
-
Unscored —
An issue was discovered in faad2 before 2.10.0. A heap-buffer-overflow exists in the function stszin located in mp4read…
-
Unscored —
An issue was discovered in faad2 through 2.10.0. A stack-buffer-overflow exists in the function ftypin located in mp4re…
-
Unscored —
An issue was discovered in faad2 through 2.10.0. A heap-buffer-overflow exists in the function sbr_qmf_synthesis_64 loc…
-
Unscored —
An issue was discovered in faad2 through 2.10.0. A NULL pointer dereference exists in the function get_sample() located…
-
Unscored —
An issue was discovered in faad2 through 2.10.0. A heap-buffer-overflow exists in the function sbr_qmf_analysis_32 loca…
-
Unscored —
An issue was discovered in faad2 through 2.10.0. A heap-buffer-overflow exists in the function lt_prediction located in…
-
Unscored —
Buffer Overflow vulnerability infaad2 v.2.10.1 allows a remote attacker to execute arbitrary code and cause a denial of…
-
Unscored —
Buffer Overflow vulnerability infaad2 v.2.10.1 allows a remote attacker to execute arbitrary code and cause a denial of…
References
-
report
https://ubuntu.com/security/CVE-2021-32272
-
report
https://ubuntu.com/security/CVE-2021-32273
-
report
https://ubuntu.com/security/CVE-2021-32274
-
report
https://ubuntu.com/security/CVE-2021-32276
-
report
https://ubuntu.com/security/CVE-2021-32277
-
report
https://ubuntu.com/security/CVE-2021-32278
-
report
https://ubuntu.com/security/CVE-2023-38857
-
report
https://ubuntu.com/security/CVE-2023-38858