Home

CVE-2021-32276

Description

An issue was discovered in faad2 through 2.10.0. A NULL pointer dereference exists in the function get_sample() located in output.c. It allows an attacker to cause Denial of Service.

Risk Information

Base Score
5.5
MODERATE
Vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
EPSS Score
Exploitation Probability
0.106

Associated Vulnerability

VulnerabilityOS Platform
Freeware Advanced Audio (AAC) Decoder (USN-6313-1) faad_2.9.1-1ubuntu0.1_i386.debLinux
Freeware Advanced Audio (AAC) Decoder (USN-6313-1) faad_2.9.1-1ubuntu0.1_amd64.debLinux
Freeware Advanced Audio (AAC) Decoder (USN-6313-1) faad_2.8.8-1_i386.debLinux
Freeware Advanced Audio (AAC) Decoder (USN-6313-1) faad_2.8.8-1_amd64.debLinux
Freeware Advanced Audio (AAC) Decoder (USN-6313-1) faad_2.7-8+deb7u1build0.14.04.1_i386.debLinux
Freeware Advanced Audio (AAC) Decoder (USN-6313-1) faad_2.7-8+deb7u1build0.14.04.1_amd64.debLinux
Freeware Advanced Audio (AAC) Decoder (USN-6313-1) faad_2.8.0~cvs20150510-1ubuntu0.1_i386.debLinux
Freeware Advanced Audio (AAC) Decoder (USN-6313-1) faad_2.8.0~cvs20150510-1ubuntu0.1_amd64.debLinux
Freeware Advanced Audio (AAC) Decoder (USN-6313-1) libfaad2_2.9.1-1ubuntu0.1_i386.debLinux
Freeware Advanced Audio (AAC) Decoder (USN-6313-1) libfaad2_2.9.1-1ubuntu0.1_amd64.debLinux
Freeware Advanced Audio (AAC) Decoder (USN-6313-1) libfaad2_2.8.8-1_i386.debLinux
Freeware Advanced Audio (AAC) Decoder (USN-6313-1) libfaad2_2.8.8-1_amd64.debLinux
Freeware Advanced Audio (AAC) Decoder (USN-6313-1) libfaad2_2.7-8+deb7u1build0.14.04.1_i386.debLinux
Freeware Advanced Audio (AAC) Decoder (USN-6313-1) libfaad2_2.7-8+deb7u1build0.14.04.1_amd64.debLinux
Freeware Advanced Audio (AAC) Decoder (USN-6313-1) libfaad2_2.8.0~cvs20150510-1ubuntu0.1_i386.debLinux
Freeware Advanced Audio (AAC) Decoder (USN-6313-1) libfaad2_2.8.0~cvs20150510-1ubuntu0.1_amd64.debLinux
Freeware Advanced Audio (AAC) Decoder (USN-6313-1) libfaad-dev_2.9.1-1ubuntu0.1_i386.debLinux
Freeware Advanced Audio (AAC) Decoder (USN-6313-1) libfaad-dev_2.9.1-1ubuntu0.1_amd64.debLinux
Freeware Advanced Audio (AAC) Decoder (USN-6313-1) libfaad-dev_2.8.8-1_i386.debLinux
Freeware Advanced Audio (AAC) Decoder (USN-6313-1) libfaad-dev_2.8.8-1_amd64.debLinux
Freeware Advanced Audio (AAC) Decoder (USN-6313-1) libfaad-dev_2.7-8+deb7u1build0.14.04.1_i386.debLinux
Freeware Advanced Audio (AAC) Decoder (USN-6313-1) libfaad-dev_2.7-8+deb7u1build0.14.04.1_amd64.debLinux
Freeware Advanced Audio (AAC) Decoder (USN-6313-1) libfaad-dev_2.8.0~cvs20150510-1ubuntu0.1_i386.debLinux
Freeware Advanced Audio (AAC) Decoder (USN-6313-1) libfaad-dev_2.8.0~cvs20150510-1ubuntu0.1_amd64.debLinux

Patch Details

No records found

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234