CVE-2017-18244: Out-of-bounds Read

The stereoprocessing function in libavcodec/aacps.c in Libav 12.2 allows remote attackers to cause a denial of service out-of-bounds read via a crafted aac file, related to ffpsapply...

PT-2018-6770

Name of the Vulnerable Software and Affected Versions: Libav version 12.2 Description: The issue is related to the stereo processing function in libavcodec/aacps.c, which allows remote attackers to cause a denial of service out-of-bounds read via a crafted aac file. This is related to the ff ps...

PT-2018-6768

Name of the Vulnerable Software and Affected Versions: Libav version 12.2 Description: The issue allows remote attackers to cause a denial of service out-of-bounds read via a crafted aac file. This is due to a problem in the apply dependent coupling function in libavcodec/aacdec.c. Recommendation...

Google Android Media framework(aac) Information Disclosure Vulnerability

Android on Google Pixel and Nexus is an open source Linux-based operating system for Google Pixel and Nexus smartphones developed by Google and the Open Handheld Alliance OHA. Media framework aac is an advanced audio coding component. An information disclosure vulnerability exists in Media...

CVE-2017-13188

An information disclosure vulnerability in the Android media framework aac. Product: Android. Versions: 7.0, 7.1.1, 7.1.2, 8.0, 8.1. Android ID: A-65280786...

CVE-2017-13188

An information disclosure vulnerability in the Android media framework aac. Product: Android. Versions: 7.0, 7.1.1, 7.1.2, 8.0, 8.1. Android ID: A-65280786...

CVE-2017-13188

CVE-2017-13188 is an information disclosure vulnerability in the Android media framework (aac). The connected Pixel/Nexus bulletin attributes this CVE to the Media framework component and lists affected Android versions 7.0, 7.1.1, 7.1.2, 8.0, and 8.1, with Android bug ID A-65280786. The bulletin...

CVE-2017-13188: Exposure of Sensitive Information to an Unauthorized Actor

An information disclosure vulnerability in the Android media framework aac. Product: Android. Versions: 7.0, 7.1.1, 7.1.2, 8.0, 8.1. Android ID: A-65280786...

PT-2017-3689

Name of the Vulnerable Software and Affected Versions: Android versions prior to security patch level 2018-04-05 Description: The issue is related to a Use After Free condition in the omx aac component of the Android operating system. This condition may occur due to improper memory usage after it...

PT-2017-3578

Name of the Vulnerable Software and Affected Versions: Android versions 7.0 through 8.1 Description: The issue is related to an information disclosure vulnerability in the Android media framework, specifically in the aac component. It is associated with insufficient state checking, which could...

Memory Corruption Vulnerability in Domi Music PC Client

Duo Mi Music PC client is a music player under Beijing Caiyun Online Technology Development Co. A memory corruption vulnerability exists in the DuoMi Music PC client when opening specific aac files, which can be exploited by attackers to cause a denial of service...

MGASA-2017-0348 Updated gstreamer0.10-plugins-good and gstreamer1.0-plugins-good packages fix security vulnerabilities

A crafted AAC audio file could have caused an invalid read and thus corruption or denial of service CVE-2016-10198. A crafted mp4 file could have caused an invalid read and thus corruption or denial of service CVE-2016-10199. A crafted AVI file could have caused an invalid read and thus corruptio...

Updated gstreamer0.10-plugins-good and gstreamer1.0-plugins-good packages fix security vulnerabilities

A crafted AAC audio file could have caused an invalid read and thus corruption or denial of service CVE-2016-10198. A crafted mp4 file could have caused an invalid read and thus corruption or denial of service CVE-2016-10199. A crafted AVI file could have caused an invalid read and thus corruptio...

PT-2019-8484

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 4.13 Description An issue was discovered in the Linux kernel where there is potential exposure of kernel stack memory. This occurs because the aac get hba info function does not initialize the hbainfo structure,...

PT-2019-8483

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 4.13 Description An issue was discovered in the Linux kernel where there is potential exposure of kernel stack memory. This occurs because the aac send raw srb function does not initialize the reply structure,...

Freeware Advanced Audio Coder (FAAC) 1.28 - Denial of Service Vulnerability

Exploit for linux platform in category dos / poc Freeware Advanced Audio Coder FAAC multiple vulnerabilities ================ Author : qflb.wu =============== Introduction: ============= FAAC is an encoder for a lossy sound compression scheme specified in MPEG-2 Part 7 and MPEG-4 Part 3 standards...

Freeware Advanced Audio Coder (FAAC) 1.28 - Denial of Service

Freeware Advanced Audio Coder FAAC 1.28 - Denial of Service Freeware Advanced Audio Coder FAAC multiple vulnerabilities ================ Author : qflb.wu =============== Introduction: ============= FAAC is an encoder for a lossy sound compression scheme specified in MPEG-2 Part 7 and MPEG-4 Part ...

Freeware Advanced Audio Coder (FAAC) 1.28 - Denial of Service

Freeware Advanced Audio Coder FAAC multiple vulnerabilities ================ Author : qflb.wu =============== Introduction: ============= FAAC is an encoder for a lossy sound compression scheme specified in MPEG-2 Part 7 and MPEG-4 Part 3 standards and known as Advanced Audio Coding AAC. This...

Freeware Advanced Audio Coder (FAAC) 1.28 Denial Of Service

Freeware Advanced Audio Coder FAAC multiple vulnerabilities ================ Author : qflb.wu =============== Introduction: ============= FAAC is an encoder for a lossy sound compression scheme specified in MPEG-2 Part 7 and MPEG-4 Part 3 standards and known as Advanced Audio Coding AAC. This...

CVE-2017-0594

CVE-2017-0594 affects Android Mediaserver’s Mediaserver component, specifically codecs/aacenc/SoftAACEncoder2.cpp in libstagefright. The issue is an elevation of privilege vulnerability that could allow a local malicious application to execute arbitrary code within the context of a privileged pro...