Description (CNA)
Stack-based buffer overflow vulnerability in frontend/main.c in faad2 before 2.2.7.1 allow local attackers to execute arbitrary code via filename and pathname options.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| github/knik0 / faad2 | affected unspecified before 2.2.7.1 |
CWE
CWE-121
References
- https://www.synology.com/security/advisory/Synology_SA_20_26
- https://github.com/knik0/faad2/commit/720f7004d6c4aabee19aad16e7c456ed76a3ebfa
ADP enrichment
No English description supplied.