CVE Catalog
CVE-2023-38858
MediumCVSS 6.5Exploitation Probability (EPSS)
Elevated risk0.90%
55th percentile - higher than 55% of all known CVEs
Summary
Buffer Overflow vulnerability in faad2 v.2.10.1 allows a remote attacker to execute arbitrary code and cause a denial of service via the mp4info function in mp4read.c:1039.
Risk Assessment
An attacker can exploit this vulnerability to gain control over the system or disrupt its operation, potentially leading to serious consequences for the organization.
Recommendation
It is recommended to update faad2 to the latest version to mitigate this vulnerability and to monitor systems for unauthorized activities.
Original NVD description (English source)
Buffer Overflow vulnerability infaad2 v.2.10.1 allows a remote attacker to execute arbitrary code and cause a denial of service via the mp4info function in mp4read.c:1039.