CVE-2021-32273: High severity libfaad2 vulnerability
Published Sep 20, 2021
·Updated
An issue was discovered in faad2 through 2.10.0. A stack-buffer-overflow exists in the function ftypin located in mp4read.c. It allows an attacker to cause Code Execution.
Affected Software
7 affected componentsFixes available
debian/faad2
2.10.0-1~deb10u12.10.0-12.10.1-12.11.1-1
ubuntu/faad2<2.8.8-1ubuntu0.1~
2.8.8-1ubuntu0.1~
ubuntu/faad2<2.9.1-1ubuntu0.1
2.9.1-1ubuntu0.1
ubuntu/faad2<2.7-8+
2.7-8+
ubuntu/faad2<2.8.0~
2.8.0~
Faad2 Project Faad2<=2.10.0
Debian Debian Linux=10.0
Event History
Sep 20, 2021
CVE Published
via Ubuntu·12:00 AM
CVE Published
via MITRE·03:26 PM
Data Sourced
via MITRE·03:26 PM
Description
Jan 11, 2024
Data Sourced
via Launchpad·11:56 PM
Description
Frequently Asked Questions
1
What is CVE-2021-32273?
CVE-2021-32273 is a vulnerability in the faad2 library that allows an attacker to execute code via a stack buffer overflow.
2
How does CVE-2021-32273 affect faad2?
CVE-2021-32273 affects faad2 versions up to and including 2.10.0.
3
What is the severity of CVE-2021-32273?
The severity of CVE-2021-32273 is high.
4
How do I fix CVE-2021-32273 on Ubuntu?
To fix CVE-2021-32273 on Ubuntu, update faad2 to version 2.8.8-1ubuntu0.1~ (for Bionic), 2.9.1-1ubuntu0.1 (for Focal), or 2.7-8+ (for Trusty).
5
How do I fix CVE-2021-32273 on Debian?
To fix CVE-2021-32273 on Debian, update faad2 to version 2.10.0-1~deb10u1, 2.10.0-1, or 2.10.1-1.