CVE-2018-19886

CVE-2018-19886 affects FAAC 1.29.9.2, with an invalid memory address dereference in libfaac/huff2.c (huffcode) that can cause a segmentation fault and denial of service. Connected advisories consistently describe the same vulnerability and confirm the impact as a crash/DoS. Gentoo GLSA 202208-16 ...

CVE-2017-9129

The CVE-2017-9129 vulnerability affects Freeware Advanced Audio Coder (FAAC) v1.28, where the wav_open_read function in frontend/input.c can be triggered by a specially crafted WAV file to cause a denial of service (large loop). This is documented across multiple sources (NVD/NASL/OSV and exploit...

CVE-2018-19891

CVE-2018-19891 affects Freeware Advanced Audio Coder (FAAC) version 1.29.9.2. The vulnerability is an invalid memory address dereference in the function huffcode (libfaac/huff2.c) that can cause a segmentation fault and application crash, leading to a denial of service in the book 10 case. The co...

CVE-2018-19887

CVE-2018-19887 affects Freeware Advanced Audio Coder (FAAC) 1.29.9.2. The issue is an invalid memory address dereference in the huffcode function (libfaac/huff2.c) that can cause a segmentation fault and denial of service. Multiple sources (Red Hat, Ubuntu, OSV, NVD) confirm the same description;...

CVE-2018-19889

The CVE-2018-19889 issue affects FAAC 1.29.9.2: an invalid memory address dereference in the huffcode function (libfaac/huff2.c) can cause a segmentation fault and application crash, resulting in a denial of service in the “book 6” case. This is documented across multiple sources (e.g., NVD, Red ...

CVE-2018-19890

CVE-2018-19890 involves an invalid memory address dereference in the huffcode function (libfaac/huff2.c) of Freeware Advanced Audio Coder (FAAC) 1.29.9.2. Multiple connected sources (Red Hat, Ubuntu, OSV, Debian, NVD, etc.) confirm a segmentation fault leading to application crash and denial of s...

CVE-2018-19888

CVE-2018-19888 affects FAAC 1.29.9.2: an invalid memory address dereference in the huffcode function (libfaac/huff2.c) can cause a segmentation fault and application crash, resulting in denial of service in the HCB_ESC case. The issue is confirmed across multiple feeds (Red Hat, Ubuntu, OSV, Debi...