4.3
CVSSv2

CVE-2021-32276

Published: 20/09/2021 Updated: 22/04/2022
CVSS v2 Base Score: 4.3 | Impact Score: 2.9 | Exploitability Score: 8.6
CVSS v3 Base Score: 5.5 | Impact Score: 3.6 | Exploitability Score: 1.8
VMScore: 383
Vector: AV:N/AC:M/Au:N/C:N/I:N/A:P

Vulnerability Summary

An issue exists in faad2 up to and including 2.10.0. A NULL pointer dereference exists in the function get_sample() located in output.c. It allows an malicious user to cause Denial of Service.

Vulnerability Trend

Vulnerable Product Search on Vulmon Subscribe to Product

faad2 project faad2

debian debian linux 9.0

debian debian linux 10.0

Vendor Advisories

Multiple vulnerabilities have been discovered in the freeware Advanced Audio Decoder, which may result in denial of service or potentially the execution of arbitrary code if malformed media files are processed For the oldstable distribution (buster), these problems have been fixed in version 2100-1~deb10u1 We recommend that you upgrade your faa ...
An issue was discovered in faad2 before version 2100 A NULL pointer dereference exists in the function get_sample() located in outputc It allows an attacker to cause denial of service ...