CVE-2022-37781

fdkaac v1.0.3 contains a heap buffer overflow via __interceptor_memcpy.part.46 in sanitizer_common_interceptors.inc, as disclosed across multiple sources (NVD OSV/UBUNTU OSV, etc.). This CVE-2022-37781 issue is documented with a high CVSS v3.1 score (7.8, HIGH) and a LOCAL attack vector with NO p...

CVE-2022-36148

CVE-2022-36148 : fdkaac commit 53fe239 contains a floating point exception (FPE) via wav_open in /src/wav_reader.c. Multiple feeds (NVD, OSV, Debian, Ubuntu/Nessus) corroborate the same issue. The vulnerability is tied to that specific commit; no patch/version information is provided in the visib...

CVE-2023-34824

CVE-2023-34824 affects fdkaac before 1.0.5, with a heap buffer overflow in caf_info within caf_reader.c. Public references across multiple feeds (NVD/OSV/Ubuntu/Nessus/OpenVAS) confirm the issue and link it to a memory handling weakness in caf_info. Impact is rated medium (CVSS v3.1: AV:L/AC:L/PR...

CVE-2023-34823

CVE-2023-34823 affects fdkaac before 1.0.5. The vulnerability is a stack overflow in the read_callback function in src/main.c. The provided documents confirm the issue but do not supply exploitation status, affected distributions, or remediation details. No additional technical specifics (beyond ...