CVE Catalog

CVE-2023-34824

MediumCVSS 5.5
Published: Updated: Translated: NVD NIST

Exploitation Probability (EPSS)

Low risk
0.29%

21th percentile - higher than 21% of all known CVEs

Summary

Versions of fdkaac before 1.0.5 were discovered to contain a heap buffer overflow in the caf_info function in caf_reader.c.

Risk Assessment

Heap buffer overflow can lead to unauthorized memory access, posing a risk of executing malicious code.

Recommendation

It is recommended to upgrade to version 1.0.5 or later to mitigate this vulnerability.

Original NVD description (English source)

fdkaac before 1.0.5 was discovered to contain a heap buffer overflow in caf_info function in caf_reader.c.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS