CVE-2018-19504

An issue was discovered in Freeware Advanced Audio Decoder 2 FAAD2 2.8.1. There is a NULL pointer dereference in ifilterbank in libfaad/filtbank.c...

CVE-2018-19502

An issue was discovered in Freeware Advanced Audio Decoder 2 FAAD2 2.8.1. There was a heap-based buffer overflow in the function excludedchannels in libfaad/syntax.c...

CVE-2018-19503

An issue was discovered in Freeware Advanced Audio Decoder 2 FAAD2 2.8.1. There was a stack-based buffer overflow in the function calculategain in libfaad/sbrhfadj.c...

DEBIAN-CVE-2018-19502

An issue was discovered in Freeware Advanced Audio Decoder 2 FAAD2 2.8.1. There was a heap-based buffer overflow in the function excludedchannels in libfaad/syntax.c...

ALPINE-CVE-2018-19503

An issue was discovered in Freeware Advanced Audio Decoder 2 FAAD2 2.8.1. There was a stack-based buffer overflow in the function calculategain in libfaad/sbrhfadj.c...

CVE-2018-19503

An issue was discovered in Freeware Advanced Audio Decoder 2 FAAD2 2.8.1. There was a stack-based buffer overflow in the function calculategain in libfaad/sbrhfadj.c...

DEBIAN-CVE-2018-19504

An issue was discovered in Freeware Advanced Audio Decoder 2 FAAD2 2.8.1. There is a NULL pointer dereference in ifilterbank in libfaad/filtbank.c...

CVE-2018-19503

CVE-2018-19503 affects FAAD2 2.8.1: a stack-based buffer overflow in libfaad/sbr_hfadj.c (calculate_gain) could enable denial of service or code execution. Several sources corroborate FAAD2 vulnerabilities; Debian GLSA/DSA recommendations urge upgrading to newer FAAD2 (e.g., 2.9.0+). If upgrading...

CVE-2018-19502

CVE-2018-19502 affects FAAD2 2.8.1: heap-based overflow in excluded_channels() (libfaad/syntax.c). Exploitation could enable denial of service via crafted MPEG AAC data. Advisory remediation: upgrade FAAD2 to at least 2.9.0 (per GLSA 202006-17) or equivalent Debian/DSA-4522/DLA-1899 guidance; Deb...

CVE-2018-19503

An issue was discovered in Freeware Advanced Audio Decoder 2 FAAD2 2.8.1. There was a stack-based buffer overflow in the function calculategain in libfaad/sbrhfadj.c...

CVE-2018-19502

An issue was discovered in Freeware Advanced Audio Decoder 2 FAAD2 2.8.1. There was a heap-based buffer overflow in the function excludedchannels in libfaad/syntax.c...

CVE-2018-19504

CVE-2018-19504 affects FAAD2 2.8.1, with a NULL pointer dereference in ifilter_bank() (libfaad/filtbank.c). Supported documents consistently describe this vulnerability across multiple feeds (NVD, CNVD, Debian DSAs, Gentoo GLSA) and indicate exposure in FAAD2; no exploit details are provided in t...

CVE-2018-19504

An issue was discovered in Freeware Advanced Audio Decoder 2 FAAD2 2.8.1. There is a NULL pointer dereference in ifilterbank in libfaad/filtbank.c...

Debian: Security Advisory (DLA-1077-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian DLA-1077-1 : faad2 security update

Various security issues were discovered in faad2, a fast audio decoder, that would allow remote attackers to cause a denial of service application crash due to memory failures or large CPU consumption via a crafted mp4 file. For Debian 7 'Wheezy', these problems have been fixed in version...

[SECURITY] [DLA 1077-1] faad2 security update

Package : faad2 Version : 2.7-8+deb7u1 CVE ID : CVE-2017-9218 CVE-2017-9219 CVE-2017-9220 CVE-2017-9221 CVE-2017-9222 CVE-2017-9223 CVE-2017-9253 CVE-2017-9254 CVE-2017-9255 CVE-2017-9256 CVE-2017-9257 Debian Bug : 867724 Various security issues were discovered in faad2, a fast audio decoder, tha...

DLA-1077-1 faad2 - security update

Bulletin has no description...

CVE-2017-9219

The mp4ffreadstsc function in common/mp4ff/mp4atom.c in Freeware Advanced Audio Decoder 2 FAAD2 2.7 allows remote attackers to cause a denial of service memory allocation error and application crash via a crafted mp4 file...

CVE-2017-9218

The mp4ffreadstsd function in common/mp4ff/mp4atom.c in Freeware Advanced Audio Decoder 2 FAAD2 2.7 allows remote attackers to cause a denial of service invalid memory read and application crash via a crafted mp4 file...

CVE-2017-9254

The mp4ffreadstts function in common/mp4ff/mp4atom.c in Freeware Advanced Audio Decoder 2 FAAD2 2.7 allows remote attackers to cause a denial of service large loop and CPU consumption via a crafted mp4 file...