CVE-2021-26567

    Dashboard / Vulnerabilities / CVE-2021-26567

    CVE-2021-26567

    Published: 26 Feb 2021Last Modified: 9 Jul 2026

    Summary:

    Details: Stack-based buffer overflow vulnerability in frontend/main.c in faad2 before 2.2.7.1 allow local attackers to execute arbitrary code via filename and pathname options.

    References: https://www.synology.com/security/advisory/Synology_SA_20_26, https://github.com/knik0/faad2/commit/720f7004d6c4aabee19aad16e7c456ed76a3ebfa

    Affected packages

    Package

    Name:

    Purl:

    Affected ranges

    Type: GIT

    Events:

    Introduced- 0
    Fixed -720f7004d6c4aabee19aad16e7c456ed76a3ebfa

    Affected versions

    FAAD2_2_7

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High
    CVE-2021-26567 | CVE-DB