faad2 project records

9 published records for vendor faad2 project.

Researcher profile

Entered KEV: 0 · 0%
Weaponized: 0 · 0%
Pre-auth RCE: 1
With a fix record: 77.8%
Median publish → KEV: No record has entered KEV

Records by year

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

Attack profile

All records

9 records

CVE records
Action	CVE	Vulnerability	Severity	KEV	EPSS	Published
31Monitor	CVE-2021-32277No exploit	An issue was discovered in faad2 through 2.10.0.faad2 project · faad2 · CWE-787 Memory safety	High7.8	—	1.2%	Sep 20, 2021
31Monitor	CVE-2021-32274No exploit	An issue was discovered in faad2 through 2.10.0.faad2 project · faad2 · CWE-787 Memory safety	High7.8	—	1.2%	Sep 20, 2021
31Monitor	CVE-2021-32278No exploit	An issue was discovered in faad2 through 2.10.0.faad2 project · faad2 · CWE-787 Memory safety	High7.8	—	1.2%	Sep 20, 2021
31Monitor	CVE-2021-32272No exploit	An issue was discovered in faad2 before 2.10.0.faad2 project · faad2 · CWE-787 Memory safety	High7.8	—	1.2%	Sep 20, 2021
31Monitor	CVE-2021-32273No exploit	An issue was discovered in faad2 through 2.10.0.faad2 project · faad2 · CWE-787 Memory safety	High7.8	—	1.1%	Sep 20, 2021
31Monitor	CVE-2021-26567No exploit	Stack-based buffer overflow vulnerability in frontend/main.c in faad2 before 2.2.7.1 allow local attackers to execute arbitrary code via filsynology · diskstation manager · CWE-121 RCE Memory safety	High7.8	—	1.1%	Feb 26, 2021
26Monitor	CVE-2023-38858No exploit	Buffer Overflow vulnerability infaad2 v.2.10.1 allows a remote attacker to execute arbitrary code and cause a denial of service via the mp4ifaad2 project · faad2 · CWE-787 pre-auth RCE Memory safety Denial of service	Medium6.5	—	1.0%	Aug 15, 2023
22Monitor	CVE-2021-32276No exploit	An issue was discovered in faad2 through 2.10.0.faad2 project · faad2 · CWE-476 Memory safety Denial of service	Medium5.5	—	0.8%	Sep 20, 2021
22Monitor	CVE-2023-38857No exploit	Buffer Overflow vulnerability infaad2 v.2.10.1 allows a remote attacker to execute arbitrary code and cause a denial of service via the stcofaad2 project · faad2 · CWE-787 RCE Memory safety Denial of service	Medium5.5	—	0.5%	Aug 15, 2023

CVE-2021-32277
31Monitor
An issue was discovered in faad2 through 2.10.0.
HighCVSS 7.8No exploitEPSS 1%
- Memory safety
faad2 project · faad2Sep 20, 2021
CVE-2021-32274
31Monitor
An issue was discovered in faad2 through 2.10.0.
HighCVSS 7.8No exploitEPSS 1%
- Memory safety
faad2 project · faad2Sep 20, 2021
CVE-2021-32278
31Monitor
An issue was discovered in faad2 through 2.10.0.
HighCVSS 7.8No exploitEPSS 1%
- Memory safety
faad2 project · faad2Sep 20, 2021
CVE-2021-32272
31Monitor
An issue was discovered in faad2 before 2.10.0.
HighCVSS 7.8No exploitEPSS 1%
- Memory safety
faad2 project · faad2Sep 20, 2021
CVE-2021-32273
31Monitor
An issue was discovered in faad2 through 2.10.0.
HighCVSS 7.8No exploitEPSS 1%
- Memory safety
faad2 project · faad2Sep 20, 2021
CVE-2021-26567
31Monitor
Stack-based buffer overflow vulnerability in frontend/main.c in faad2 before 2.2.7.1 allow local attackers to execute arbitrary code via fil
HighCVSS 7.8No exploitEPSS 1%
- RCE
- Memory safety
synology · diskstation managerFeb 26, 2021
CVE-2023-38858
26Monitor
Buffer Overflow vulnerability infaad2 v.2.10.1 allows a remote attacker to execute arbitrary code and cause a denial of service via the mp4i
MediumCVSS 6.5No exploitEPSS 1%
faad2 project · faad2Aug 15, 2023
CVE-2021-32276
22Monitor
An issue was discovered in faad2 through 2.10.0.
MediumCVSS 5.5No exploitEPSS 0%
- Memory safety
- Denial of service
faad2 project · faad2Sep 20, 2021
CVE-2023-38857
22Monitor
Buffer Overflow vulnerability infaad2 v.2.10.1 allows a remote attacker to execute arbitrary code and cause a denial of service via the stco
MediumCVSS 5.5No exploitEPSS 0%
faad2 project · faad2Aug 15, 2023