CVE-2021-32272
- Source
- https://cve.org/CVERecord?id=CVE-2021-32272
- Import Source
- https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2021-32272.json
- JSON Data
- https://api.test.osv.dev/v1/vulns/CVE-2021-32272
- Downstream
- Published
- 2021-09-20T16:15:10.143Z
- Modified
- 2026-02-11T14:32:17.872178Z
- Severity
-
- 7.8 (High) CVSS_V3 - CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVSS Calculator
- Summary
- [none]
- Details
-
An issue was discovered in faad2 before 2.10.0. A heap-buffer-overflow exists in the function stszin located in mp4read.c. It allows an attacker to cause Code Execution.
- References
-
- https://github.com/knik0/faad2/commit/1b71a6ba963d131375f5e489b3b25e36f19f3f24
- https://github.com/knik0/faad2/issues/57
- https://www.debian.org/security/2022/dsa-5109
- https://github.com/knik0/faad2/issues/57
- https://github.com/knik0/faad2/commit/1b71a6ba963d131375f5e489b3b25e36f19f3f24
- https://github.com/knik0/faad2/issues/57