Back to search
CVE-2018-20196
Published: Dec 18, 2018
Modified: Aug 5, 2024
PUBLISHED
Description
There is a stack-based buffer overflow in the third instance of the calculate_gain function in libfaad/sbr_hfadj.c in Freeware Advanced Audio Decoder 2 (FAAD2) 2.8.8. A crafted input will lead to a denial of service or possibly unspecified other impact because the S_M array is mishandled.
| Vendor | Product | Versions |
|---|---|---|
n/a | n/a | affected n/a |
References
https://github.com/knik0/faad2/issues/19
x_refsource_MISC
[debian-lts-announce] 20190828 [SECURITY] [DLA 1899-1] faad2 security update
mailing-list
x_refsource_MLIST
GLSA-202006-17
vendor-advisory
x_refsource_GENTOO
DSA-5109
vendor-advisory
x_refsource_DEBIAN
Security Training
Train your team to recognize and prevent security threats with our comprehensive security awareness program.
Start TrainingVulnerability Scanning
Discover vulnerabilities in your applications and infrastructure before attackers do.
Scan Now