CVE Catalog

CVE-2023-34823

MediumCVSS 5.5
Published: Updated: Translated: NVD NIST

Exploitation Probability (EPSS)

Low risk
0.29%

21th percentile - higher than 21% of all known CVEs

Summary

Versions of fdkaac before 1.0.5 were found to contain a stack overflow in the read_callback function in src/main.c.

Risk Assessment

Stack overflow may lead to unauthorized memory access, posing a risk of arbitrary code execution.

Recommendation

It is recommended to upgrade to fdkaac version 1.0.5 or later to mitigate this vulnerability.

Original NVD description (English source)

fdkaac before 1.0.5 was discovered to contain a stack overflow in read_callback function in src/main.c.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS