Raind

**Name of the Vulnerable Software and Affected Versions** FLVMeta versions prior to 1.2.3 **Description** A heap-based buffer overflow occurs in the AMF String Processing component within the `amf string new()` function located in the src/amf.c file. This issue is triggered by the manipulation of the argument length and can be exploited remotely. **Recommendations** Apply patch f412a33b9a84c2d1a9dee145a868feddbf64879e to remediate the issue. As a temporary mitigation, restrict the use of the `amf string new()` function.

**Name of the Vulnerable Software and Affected Versions** FLVMeta versions prior to 1.2.3 **Description** A remote attack can trigger a null pointer dereference—a condition where the software attempts to read from a memory address that is null, typically leading to a crash—within the AMF Object Parsing component. The issue resides in the `amf object get()` function located in the `src/amf.c` file. **Recommendations** Deploy patch 52642f7dfb76ec7334016622dde60b1ae963d79b for versions prior to 1.2.3.