Back to search
CVE-2018-20360
Published: Dec 22, 2018
Modified: Aug 5, 2024
PUBLISHED
Description
An invalid memory address dereference was discovered in the sbr_process_channel function of libfaad/sbr_dec.c in Freeware Advanced Audio Decoder 2 (FAAD2) 2.8.8. The vulnerability causes a segmentation fault and application crash, which leads to denial of service.
| Vendor | Product | Versions |
|---|---|---|
n/a | n/a | affected n/a |
References
https://github.com/knik0/faad2/issues/32
x_refsource_MISC
[debian-lts-announce] 20190828 [SECURITY] [DLA 1899-1] faad2 security update
mailing-list
x_refsource_MLIST
GLSA-202006-17
vendor-advisory
x_refsource_GENTOO
[debian-lts-announce] 20211024 [SECURITY] [DLA 2792-1] faad2 security update
mailing-list
x_refsource_MLIST
DSA-5109
vendor-advisory
x_refsource_DEBIAN
Security Training
Train your team to recognize and prevent security threats with our comprehensive security awareness program.
Start TrainingVulnerability Scanning
Discover vulnerabilities in your applications and infrastructure before attackers do.
Scan Now