DEBIAN-CVE-2018-20194

There is a stack-based buffer underflow in the third instance of the calculategain function in libfaad/sbrhfadj.c in Freeware Advanced Audio Decoder 2 FAAD2 2.8.8. A crafted input will lead to a denial of service or possibly unspecified other impact because limiting the additional noise energy...

Freeware Advanced Audio Decoder 2 Buffer Overflow Vulnerability (CNVD-2019-05833)

Freeware Advanced Audio Decoder 2 FAAD2 is an open source MPEG-4 and MPEG-2 AAC decoder licensed under the GPLv2 license. A stack buffer overflow vulnerability exists in the third instance of the calculategain function in libfaad/sbrhfadj.c in Freeware Advanced Audio Decoder 2 FAAD2 2.8.8, which...

Freeware Advanced Audio Decoder 2 Buffer Overflow Vulnerability (CNVD-2019-05832)

Freeware Advanced Audio Decoder 2 FAAD2 is an open source MPEG-4 and MPEG-2 AAC decoder licensed under the GPLv2 license. A stack buffer overflow vulnerability exists in the third instance of the calculategain function in libfaad/sbrhfadj.c in Freeware Advanced Audio Decoder 2 FAAD2 2.8.8, which...

Freeware Advanced Audio Decoder 2 Buffer Overflow Vulnerability (CNVD-2019-05835)

Freeware Advanced Audio Decoder 2 FAAD2 is an open source MPEG-4 and MPEG-2 AAC decoder licensed under the GPLv2 license. A stack buffer overflow vulnerability exists in the third instance of the calculategain function in libfaad/sbrhfadj.c in Freeware Advanced Audio Decoder 2 FAAD2 2.8.8, which...

PT-2018-3820 · Freeware +2 · Faad2 +2

Name of the Vulnerable Software and Affected Versions: Freeware Advanced Audio Decoder 2 FAAD2 version 2.8.8 Description: The issue is related to a stack-based buffer overflow in the calculate gain function within the libfaad/sbr hfadj.c component of the Freeware Advanced Audio Decoder 2 FAAD2...

Google Android Buffer Overflow Vulnerability (CNVD-2019-27579)

Android is a Linux-based open source operating system jointly developed by Google and the Open Handheld Alliance OHA. A buffer overflow vulnerability exists in the 'impdparametricdrcparsegainsetparams' function of the impddrcstaticpayload.c file in Android version 9, which stems from a lack of...

CVE-2018-9569

In impdinitdrcdecodepostconfig of impddrcgaindecoder.c there is a possible out-of-bound write due to incorrect bounds check. This could lead to remote code execution with no additional execution privileges needed. User interaction is needed for exploitation. Product: Android. Versions: Android-9...

KLA11380 Multiple vulnerabilities in Adobe Flash Player

Multiple serious vulnerabilities were found in Adobe Flash Player. Malicious users can exploit these vulnerabilities to execute arbitrary code, gain privileges. Below is a complete list of vulnerabilities: 1. An use-after-free vulnerability can be exploited remotely via specially crafted file to...

ChipsBank UMPTool Privilege Gain Vulnerability

ChipsBank UMPTool is a tool for batch modification of USB flash drive information. A security vulnerability exists in ChipsBank UMPTool that originates from the program's use of a simple alternative encryption algorithm to store passwords in NAND. An attacker in close physical proximity could...

Freeware Advanced Audio Decoder 2 Buffer Overflow Vulnerability

Freeware Advanced Audio Decoder 2 FAAD2 is a free advanced audio encoder. A stack buffer overflow vulnerability exists in the 'calculategain' function in the libfaad/sbrhfadj.c file in FAAD2 version 2.8.1, which can be exploited by an attacker to cause a denial of service or code execution...

UBUNTU-CVE-2018-19503

An issue was discovered in Freeware Advanced Audio Decoder 2 FAAD2 2.8.1. There was a stack-based buffer overflow in the function calculategain in libfaad/sbrhfadj.c...

ALPINE-CVE-2018-19503

An issue was discovered in Freeware Advanced Audio Decoder 2 FAAD2 2.8.1. There was a stack-based buffer overflow in the function calculategain in libfaad/sbrhfadj.c...

CVE-2018-19503

An issue was discovered in Freeware Advanced Audio Decoder 2 FAAD2 2.8.1. There was a stack-based buffer overflow in the function calculategain in libfaad/sbrhfadj.c...

PT-2018-3066 · Freeware Advanced Audio Coder +1 · Faad2 +1

Name of the Vulnerable Software and Affected Versions: Freeware Advanced Audio Decoder 2 FAAD2 version 2.8.1 Description: The issue is related to a stack-based buffer overflow in the calculate gain function. This function is located in the libfaad/sbr hfadj.c file. The exploitation of this issue...

PT-2018-3070 · Audiocoding +1 · Faad2 +1

Name of the Vulnerable Software and Affected Versions: Freeware Advanced Audio Decoder 2 FAAD2 version 2.8.8 Description: The issue is related to a stack-based buffer underflow in the calculate gain function. A crafted input can lead to a denial of service or possibly other impacts due to the...

Elite North Koreans aren’t opposed to exploiting internet for financial gain

By David Balaban According to a report from Recorded Future, it seems the ruling elite in North Korea are now using the Internet more and more to take advantage of money-making opportunities and avoid various economic sanctions. Not only is the Kim regime utilizing interbank transfer systems,...

Google Android Framework elevation of privilege vulnerability (CNVD-2018-22761)

Android is a free and open source Linux-based operating system led and developed by Google Inc. and the Open Handset Alliance. An elevation of privilege vulnerability exists in the Framework component of Google Android 9, which can be exploited by an attacker to elevate privileges...

Nation-State Phishing: A Country-Sized Catch

Thanks to the traditional role of phishing in widespread email scams, there is a general tendency to equate it with clearly fraudulent and obnoxiously implausible emails. While this misperception has not evolved, phishing campaigns have. Andrea Little Limbago Once a threat that went hand-in-hand...

GAIN Electronic Co. Ltd SAGA1-L Series Access Control Vulnerability

GAIN SAGA1-L Series is a SAGA1-L series industrial remote control product from GAIN Electronic. A security vulnerability exists in GAIN SAGA1-L Series products using firmware versions prior to A0.10. An attacker could exploit this vulnerability to forcibly pair a device without human interaction...

GAIN Electronic Co. Ltd SAGA1-L Series Incorrect Certification Vulnerability

GAIN SAGA1-L Series is a SAGA1-L series industrial remote control product from GAIN Electronic. A security vulnerability exists in GAIN SAGA1-L Series products using firmware versions prior to A0.10. An attacker in close physical proximity could exploit the vulnerability to reprogram the product...