Skip to main content

Faad2 Project

9 CVEs vendor

Monthly

CVE-2023-38858 Aug 15, 17:15 MEDIUM POC This Month

Buffer Overflow vulnerability infaad2 v.2.10.1 allows a remote attacker to execute arbitrary code and cause a denial of service via the mp4info function in mp4read.c:1039. Rated medium severity (CVSS 6.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

RCE Buffer Overflow Denial Of Service Memory Corruption Faad2 +1
NVD GitHub
CVSS 3.1
6.5
EPSS
0.9%
CVE-2023-38857 Aug 15, 17:15 MEDIUM POC This Month

Buffer Overflow vulnerability infaad2 v.2.10.1 allows a remote attacker to execute arbitrary code and cause a denial of service via the stcoin function in mp4read.c. Rated medium severity (CVSS 5.5), this vulnerability is no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

RCE Buffer Overflow Denial Of Service Memory Corruption Faad2 +1
NVD GitHub
CVSS 3.1
5.5
EPSS
0.5%
CVE-2021-32278 Sep 20, 16:15 HIGH POC This Week

An issue was discovered in faad2 through 2.10.0. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

RCE Buffer Overflow Memory Corruption Debian Debian Linux +2
NVD GitHub
CVSS 3.1
7.8
EPSS
1.2%
CVE-2021-32277 Sep 20, 16:15 HIGH POC This Week

An issue was discovered in faad2 through 2.10.0. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

RCE Buffer Overflow Memory Corruption Debian Debian Linux +2
NVD GitHub
CVSS 3.1
7.8
EPSS
1.2%
CVE-2021-32276 Sep 20, 16:15 MEDIUM POC This Month

An issue was discovered in faad2 through 2.10.0. Rated medium severity (CVSS 5.5), this vulnerability is no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

Denial Of Service Null Pointer Dereference Debian Debian Linux Faad2 +1
NVD GitHub
CVSS 3.1
5.5
EPSS
0.9%
CVE-2021-32274 Sep 20, 16:15 HIGH POC This Week

An issue was discovered in faad2 through 2.10.0. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

RCE Buffer Overflow Memory Corruption Debian Debian Linux +2
NVD GitHub
CVSS 3.1
7.8
EPSS
1.2%
CVE-2021-32273 Sep 20, 16:15 HIGH POC This Week

An issue was discovered in faad2 through 2.10.0. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

RCE Buffer Overflow Memory Corruption Debian Debian Linux +2
NVD GitHub
CVSS 3.1
7.8
EPSS
1.1%
CVE-2021-32272 Sep 20, 16:15 HIGH POC PATCH This Week

An issue was discovered in faad2 before 2.10.0. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. Public exploit code available.

RCE Buffer Overflow Memory Corruption Debian Debian Linux +2
NVD GitHub
CVSS 3.1
7.8
EPSS
1.2%
CVE-2021-26567 Feb 26, 22:15 HIGH PATCH This Week

Stack-based buffer overflow vulnerability in frontend/main.c in faad2 before 2.2.7.1 allow local attackers to execute arbitrary code via filename and pathname options. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity.

RCE Buffer Overflow Stack Overflow Synology Diskstation Manager +5
NVD GitHub
CVSS 3.1
7.8
EPSS
1.1%
EPSS 1% CVSS 6.5
MEDIUM POC This Month

Buffer Overflow vulnerability infaad2 v.2.10.1 allows a remote attacker to execute arbitrary code and cause a denial of service via the mp4info function in mp4read.c:1039. Rated medium severity (CVSS 6.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

RCE Buffer Overflow Denial Of Service +3
NVD GitHub
EPSS 1% CVSS 5.5
MEDIUM POC This Month

Buffer Overflow vulnerability infaad2 v.2.10.1 allows a remote attacker to execute arbitrary code and cause a denial of service via the stcoin function in mp4read.c. Rated medium severity (CVSS 5.5), this vulnerability is no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

RCE Buffer Overflow Denial Of Service +3
NVD GitHub
EPSS 1% CVSS 7.8
HIGH POC This Week

An issue was discovered in faad2 through 2.10.0. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

RCE Buffer Overflow Memory Corruption +4
NVD GitHub
EPSS 1% CVSS 7.8
HIGH POC This Week

An issue was discovered in faad2 through 2.10.0. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

RCE Buffer Overflow Memory Corruption +4
NVD GitHub
EPSS 1% CVSS 5.5
MEDIUM POC This Month

An issue was discovered in faad2 through 2.10.0. Rated medium severity (CVSS 5.5), this vulnerability is no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

Denial Of Service Null Pointer Dereference Debian +3
NVD GitHub
EPSS 1% CVSS 7.8
HIGH POC This Week

An issue was discovered in faad2 through 2.10.0. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

RCE Buffer Overflow Memory Corruption +4
NVD GitHub
EPSS 1% CVSS 7.8
HIGH POC This Week

An issue was discovered in faad2 through 2.10.0. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

RCE Buffer Overflow Memory Corruption +4
NVD GitHub
EPSS 1% CVSS 7.8
HIGH POC PATCH This Week

An issue was discovered in faad2 before 2.10.0. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. Public exploit code available.

RCE Buffer Overflow Memory Corruption +4
NVD GitHub
EPSS 1% CVSS 7.8
HIGH PATCH This Week

Stack-based buffer overflow vulnerability in frontend/main.c in faad2 before 2.2.7.1 allow local attackers to execute arbitrary code via filename and pathname options. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity.

RCE Buffer Overflow Stack Overflow +7
NVD GitHub

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy