CVE-2021-32276: Null Pointer Dereference
An issue was discovered in faad2 through 2.10.0. A NULL pointer dereference exists in the function getsample() located in output.c. It allows an attacker to cause Denial of Service.
Affected Software
Event History
Frequently Asked Questions
What is CVE-2021-32276?
CVE-2021-32276 is a vulnerability discovered in faad2 through version 2.10.0 that allows an attacker to cause a Denial of Service (DoS) by exploiting a NULL pointer dereference in the function get_sample().
How can an attacker exploit CVE-2021-32276?
An attacker can exploit CVE-2021-32276 by sending a specially crafted input that triggers the NULL pointer dereference in the get_sample() function, causing a DoS.
Which versions of faad2 are affected by CVE-2021-32276?
Versions up to and including 2.10.0 of faad2 are affected by CVE-2021-32276.
How can I fix the CVE-2021-32276 vulnerability?
To fix the CVE-2021-32276 vulnerability, you should update your faad2 installation to version 2.10.1 or apply the appropriate patches provided by the vendor.
Where can I find more information about CVE-2021-32276?
You can find more information about CVE-2021-32276 on the official MITRE CVE website and the relevant vendor security notices.