high7.8
CVE-2021-26567
Stack-based buffer overflow vulnerability in frontend/main.c in faad2 before 2.2.7.1 allow local attackers to execute arbitrary code via filename and pathname …
Impact
Stack-based buffer overflow vulnerability in frontend/main.c in faad2 before 2.2.7.1 allow local attackers to execute arbitrary code via filename and pathname options.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Synology | Diskstation Manager | before 6.2.3-25426-3 |
| Synology | Vs960hd Firmware | All versions |
| Synology | Skynas Firmware | All versions |
| Synology | Diskstation Manager Unified Controller | Version 3.0 |
| Faad2 Project | Faad2 | before 2.2.7.1 |
Weakness classification
References
- NVD record
- CVE.org record
- https://github.com/knik0/faad2/commit/720f7004d6c4aabee19aad16e7c456ed76a3ebfa
- https://www.synology.com/security/advisory/Synology_SA_20_26
- https://github.com/knik0/faad2/commit/720f7004d6c4aabee19aad16e7c456ed76a3ebfa
- https://www.synology.com/security/advisory/Synology_SA_20_26