CVE Catalog

CVE-2023-38857

MediumCVSS 5.5
Published: Updated: Translated: NVD NIST

Exploitation Probability (EPSS)

Low risk
0.53%

40th percentile - higher than 40% of all known CVEs

Summary

Buffer Overflow vulnerability in faad2 v.2.10.1 allows a remote attacker to execute arbitrary code and cause a denial of service via the stcoin function in mp4read.c.

Risk Assessment

An attacker can exploit this vulnerability to gain control over the system or disrupt its operation, potentially leading to serious consequences for the organization.

Recommendation

It is recommended to update to the latest version of faad2 to mitigate this vulnerability and to monitor systems for unauthorized activities.

Original NVD description (English source)

Buffer Overflow vulnerability infaad2 v.2.10.1 allows a remote attacker to execute arbitrary code and cause a denial of service via the stcoin function in mp4read.c.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS