Back to search
CVE-2018-20198
Published: Dec 18, 2018
Modified: Aug 5, 2024
PUBLISHED
Description
A NULL pointer dereference was discovered in ifilter_bank of libfaad/filtbank.c in Freeware Advanced Audio Decoder 2 (FAAD2) 2.8.8. The vulnerability causes a segmentation fault and application crash, which leads to denial of service because adding to windowed output is mishandled in the LONG_START_SEQUENCE case.
| Vendor | Product | Versions |
|---|---|---|
n/a | n/a | affected n/a |
References
https://github.com/knik0/faad2/issues/23
x_refsource_MISC
[debian-lts-announce] 20190519 [SECURITY] [DLA 1791-1] faad2 security update
mailing-list
x_refsource_MLIST
DSA-4522
vendor-advisory
x_refsource_DEBIAN
20190916 [SECURITY] [DSA 4522-1] faad2 security update
mailing-list
x_refsource_BUGTRAQ
GLSA-202006-17
vendor-advisory
x_refsource_GENTOO
Security Training
Train your team to recognize and prevent security threats with our comprehensive security awareness program.
Start TrainingVulnerability Scanning
Discover vulnerabilities in your applications and infrastructure before attackers do.
Scan Now