CVE-2023-38858: Buffer Overflow vulnerability infaad2 v.2.10.1 allows a remote attacker to execute arbitrary code and cause a denial of service via the mp4info function in…

medium6.5CVSS 3.1

AVNACLPRNUIRSUCNINAH

Buffer Overflow vulnerability infaad2 v.2.10.1 allows a remote attacker to execute arbitrary code and cause a denial of service via the mp4info function in mp4read.c:1039.

Affected

6 ranges

Vendor	Product	Version range	Fixed in
debian	faad2	—	—
faad2_project	faad2	—	—
faad2_project	faad2	>= 0 < 2.9.1-1ubuntu0.1	2.9.1-1ubuntu0.1
faad2_project	faad2	>= 0 < 2.7-8+deb8u3ubuntu0.1~esm1	2.7-8+deb8u3ubuntu0.1~esm1
faad2_project	faad2	>= 0 < 2.8.0~cvs20150510-1ubuntu0.1+esm1	2.8.0~cvs20150510-1ubuntu0.1+esm1
faad2_project	faad2	>= 0 < 2.8.8-1ubuntu0.1~esm1	2.8.8-1ubuntu0.1~esm1

CVSS provenance

nvdv3.16.5MEDIUMCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

osv7.8HIGH