CVE-2017-9219

Name of the Vulnerable Software and Affected Versions FAAD2 version 2.7

Description The issue is related to the mp4ff read stsc function in the FAAD2 audio decoder, which can cause a buffer overflow in memory. This can be exploited by an attacker using a specially crafted mp4 file, potentially leading to a denial of service, resulting in a memory allocation error and application crash.

Recommendations For FAAD2 version 2.7, consider disabling the mp4ff read stsc function as a temporary workaround until a patch is available. Restrict access to mp4 files to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.