Home

CVE-2021-32274

Description

An issue was discovered in faad2 through 2.10.0. A heap-buffer-overflow exists in the function sbr_qmf_synthesis_64 located in sbr_qmf.c. It allows an attacker to cause code Execution.

Risk Information

Base Score
7.8
MODERATE
Vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
EPSS Score
Exploitation Probability
0.166

Associated Vulnerability

VulnerabilityOS Platform
Freeware Advanced Audio (AAC) Decoder (USN-6313-1) faad_2.9.1-1ubuntu0.1_i386.debLinux
Freeware Advanced Audio (AAC) Decoder (USN-6313-1) faad_2.9.1-1ubuntu0.1_amd64.debLinux
Freeware Advanced Audio (AAC) Decoder (USN-6313-1) faad_2.8.8-1_i386.debLinux
Freeware Advanced Audio (AAC) Decoder (USN-6313-1) faad_2.8.8-1_amd64.debLinux
Freeware Advanced Audio (AAC) Decoder (USN-6313-1) faad_2.7-8+deb7u1build0.14.04.1_i386.debLinux
Freeware Advanced Audio (AAC) Decoder (USN-6313-1) faad_2.7-8+deb7u1build0.14.04.1_amd64.debLinux
Freeware Advanced Audio (AAC) Decoder (USN-6313-1) faad_2.8.0~cvs20150510-1ubuntu0.1_i386.debLinux
Freeware Advanced Audio (AAC) Decoder (USN-6313-1) faad_2.8.0~cvs20150510-1ubuntu0.1_amd64.debLinux
Freeware Advanced Audio (AAC) Decoder (USN-6313-1) libfaad2_2.9.1-1ubuntu0.1_i386.debLinux
Freeware Advanced Audio (AAC) Decoder (USN-6313-1) libfaad2_2.9.1-1ubuntu0.1_amd64.debLinux
Freeware Advanced Audio (AAC) Decoder (USN-6313-1) libfaad2_2.8.8-1_i386.debLinux
Freeware Advanced Audio (AAC) Decoder (USN-6313-1) libfaad2_2.8.8-1_amd64.debLinux
Freeware Advanced Audio (AAC) Decoder (USN-6313-1) libfaad2_2.7-8+deb7u1build0.14.04.1_i386.debLinux
Freeware Advanced Audio (AAC) Decoder (USN-6313-1) libfaad2_2.7-8+deb7u1build0.14.04.1_amd64.debLinux
Freeware Advanced Audio (AAC) Decoder (USN-6313-1) libfaad2_2.8.0~cvs20150510-1ubuntu0.1_i386.debLinux
Freeware Advanced Audio (AAC) Decoder (USN-6313-1) libfaad2_2.8.0~cvs20150510-1ubuntu0.1_amd64.debLinux
Freeware Advanced Audio (AAC) Decoder (USN-6313-1) libfaad-dev_2.9.1-1ubuntu0.1_i386.debLinux
Freeware Advanced Audio (AAC) Decoder (USN-6313-1) libfaad-dev_2.9.1-1ubuntu0.1_amd64.debLinux
Freeware Advanced Audio (AAC) Decoder (USN-6313-1) libfaad-dev_2.8.8-1_i386.debLinux
Freeware Advanced Audio (AAC) Decoder (USN-6313-1) libfaad-dev_2.8.8-1_amd64.debLinux
Freeware Advanced Audio (AAC) Decoder (USN-6313-1) libfaad-dev_2.7-8+deb7u1build0.14.04.1_i386.debLinux
Freeware Advanced Audio (AAC) Decoder (USN-6313-1) libfaad-dev_2.7-8+deb7u1build0.14.04.1_amd64.debLinux
Freeware Advanced Audio (AAC) Decoder (USN-6313-1) libfaad-dev_2.8.0~cvs20150510-1ubuntu0.1_i386.debLinux
Freeware Advanced Audio (AAC) Decoder (USN-6313-1) libfaad-dev_2.8.0~cvs20150510-1ubuntu0.1_amd64.debLinux

Patch Details

No records found

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234