CVE-2021-32277: High severity libfaad2 vulnerability
Published Sep 20, 2021
·Updated
An issue was discovered in faad2 through 2.10.0. A heap-buffer-overflow exists in the function sbrqmfanalysis32 located in sbrqmf.c. It allows an attacker to cause code Execution.
Affected Software
8 affected componentsFixes available
debian/faad2
2.10.0-1~deb10u12.10.0-12.10.1-12.11.1-1
ubuntu/faad2<2.8.8-1ubuntu0.1~
2.8.8-1ubuntu0.1~
ubuntu/faad2<2.9.1-1ubuntu0.1
2.9.1-1ubuntu0.1
ubuntu/faad2<2.7-8+
2.7-8+
ubuntu/faad2<2.8.0~
2.8.0~
Faad2 Project Faad2<=2.10.0
Debian Debian Linux=9.0
Debian Debian Linux=10.0
Event History
Sep 20, 2021
CVE Published
via Ubuntu·12:00 AM
CVE Published
via MITRE·03:26 PM
Data Sourced
via MITRE·03:26 PM
Description
Jan 11, 2024
Data Sourced
via Launchpad·11:56 PM
Description
Frequently Asked Questions
1
What is CVE-2021-32277?
CVE-2021-32277 is a vulnerability discovered in faad2 through version 2.10.0.
2
What is the severity of CVE-2021-32277?
The severity of CVE-2021-32277 is not mentioned in the provided information.
3
How can an attacker exploit CVE-2021-32277?
An attacker can exploit CVE-2021-32277 to cause code execution.
4
Which software versions are affected by CVE-2021-32277?
faad2 versions up to 2.10.0 are affected by CVE-2021-32277.
5
How can I fix CVE-2021-32277?
To fix CVE-2021-32277, update faad2 to version 2.8.8-1ubuntu0.1~ or later.