CVE-2008-4201

Name of the Vulnerable Software and Affected Versions: FAAD2 versions 2.6.1 and earlier

Description: The issue is related to a heap-based buffer overflow in the decodeMP4file function, located in frontend/main.c. This can be triggered by remote attackers using a crafted MPEG-4 (MP4) file, potentially leading to a denial of service (crash) and possibly allowing the execution of arbitrary code.

Recommendations: For FAAD2 versions 2.6.1 and earlier, at the moment, there is no information about a newer version that contains a fix for this vulnerability.