An issue was discovered in faad2 through 2.10.0. A NULL pointer dereference exists in the function get_sample() located in output.c. It allows an attacker to cause Denial of Service.
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2021-32276.json"