Related Vulnerabilities: CVE-2017-9218  

the mp4ff_read_stsd function in common/mp4ff/mp4atom.c in Freeware Advanced Audio Decoder 2 (FAAD2) 2.7 can cause a denial of service(invalid memory read and application crash) via a crafted mp4 file.

Severity High

Remote Yes

Type Denial of service

Description

the mp4ff_read_stsd function in common/mp4ff/mp4atom.c in Freeware Advanced Audio Decoder 2 (FAAD2) 2.7 can cause a 
denial of service(invalid memory read and application crash) via a crafted mp4 file.

AVG-328 faad2 2.7-4 2.8.1-1 High Fixed FS#54613

http://seclists.org/fulldisclosure/2017/Jun/32