CVE-2017-9221

Name of the Vulnerable Software and Affected Versions FAAD2 version 2.7

Description The issue is related to the mp4ff read mdhd function in the common/mp4ff/mp4atom.c file of the Freeware Advanced Audio Decoder 2 (FAAD2). It is caused by a buffer overflow in memory, allowing an attacker to cause a denial of service by crashing the application with a specially crafted mp4 file. The mp4ff read mdhd function is vulnerable to invalid memory read.

Recommendations For FAAD2 version 2.7, consider disabling the mp4ff read mdhd function as a temporary workaround until a patch is available to prevent potential denial of service attacks via crafted mp4 files.