CVE-2017-9257

Name of the Vulnerable Software and Affected Versions FAAD2 version 2.7

Description The issue is related to the mp4ff read ctts function in the common/mp4ff/mp4atom.c file, which can cause a denial of service due to large loop and CPU consumption when processing a crafted mp4 file. This is a result of resource management errors in the audio decoder.

Recommendations For FAAD2 version 2.7, consider disabling the mp4ff read ctts function as a temporary workaround until a patch is available to prevent potential denial of service attacks via specially crafted mp4 files.