Alpine/faad2: medium 5.5

Buffer Overflow vulnerability infaad2 v.2.10.1 allows a remote attacker to execute arbitrary code and cause a denial of service via the stcoin function in mp4read.c.

Action: Upgrade faad2 to 2.11.0-r0 or later.

Affected

Fixed versions

Sources

• osv: ALPINE-CVE-2023-38857#Alpine:v3.22/faad2
• https://security.alpinelinux.org/vuln/CVE-2023-38857

published 2023-08-15T17:15:11.420Z · modified 2026-11-03T06:32:43.164942Z · JSON