CVE-2017-9256

Name of the Vulnerable Software and Affected Versions Freeware Advanced Audio Decoder 2 (FAAD2) version 2.7

Description The issue is related to the mp4ff read stco function, which can lead to a denial of service due to excessive CPU consumption caused by a large loop. This can be triggered by a remote attacker using a specially crafted mp4 file.

Recommendations For version 2.7, consider disabling the mp4ff read stco function as a temporary workaround until a patch is available. Restrict access to mp4 files from untrusted sources to minimize the risk of exploitation.