Faad2 Project Faad2 vulnerabilities
9 vulnerabilities
Known vulnerabilities in Faad2 Project Faad2, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
CVE-2021-26567faad2_projectfaad2+5
EPSS score1.13%
Stack-based buffer overflow vulnerability in frontend/main.c in faad2 before 2.2.7.1 allow local attackers to execute arbitrary code via filename and pathname options.CVE-2021-32277debianfaad2+4EPSS score1.29%
An issue was discovered in faad2 through 2.10.0. A heap-buffer-overflow exists in the function sbr_qmf_analysis_32 located in sbr_qmf.c. It allows an attacker to cause code Execution.CVE-2021-32272debianfaad2+4EPSS score1.25%
An issue was discovered in faad2 before 2.10.0. A heap-buffer-overflow exists in the function stszin located in mp4read.c. It allows an attacker to cause Code Execution.CVE-2021-32276debianfaad2+4EPSS score0.88%
An issue was discovered in faad2 through 2.10.0. A NULL pointer dereference exists in the function get_sample() located in output.c. It allows an attacker to cause Denial of Service.CVE-2021-32273debianfaad2+4EPSS score1.15%
An issue was discovered in faad2 through 2.10.0. A stack-buffer-overflow exists in the function ftypin located in mp4read.c. It allows an attacker to cause Code Execution.CVE-2021-32278debianfaad2+4EPSS score1.26%
An issue was discovered in faad2 through 2.10.0. A heap-buffer-overflow exists in the function lt_prediction located in lt_predict.c. It allows an attacker to cause code Execution.CVE-2021-32274debianfaad2+4EPSS score1.29%
An issue was discovered in faad2 through 2.10.0. A heap-buffer-overflow exists in the function sbr_qmf_synthesis_64 located in sbr_qmf.c. It allows an attacker to cause code Execution.CVE-2023-38858ubuntufaad2+1EPSS score1.02%
Buffer Overflow vulnerability infaad2 v.2.10.1 allows a remote attacker to execute arbitrary code and cause a denial of service via the mp4info function in mp4read.c:1039.CVE-2023-38857ubuntufaad2+1EPSS score0.59%
Buffer Overflow vulnerability infaad2 v.2.10.1 allows a remote attacker to execute arbitrary code and cause a denial of service via the stcoin function in mp4read.c.