CVE-2017-9255

Name of the Vulnerable Software and Affected Versions FAAD2 version 2.7

Description The issue is related to the mp4ff read stsc function, which can be exploited by remote attackers to cause a denial of service. This is achieved through a crafted mp4 file, leading to a large loop and significant CPU consumption. The vulnerability is associated with the execution of a cycle without sufficient limitation on the number of its executions.

Recommendations For FAAD2 version 2.7, consider disabling the mp4ff read stsc function as a temporary workaround until a patch is available to prevent the denial of service caused by crafted mp4 files.