Vulnerabilities (CVE)

Filtered by vendor Audiocoding Subscribe
Total 36 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2019-6956 2 Audiocoding, Debian 2 Freeware Advanced Audio Decoder 2, Debian Linux 2024-11-21 5.8 MEDIUM 7.1 HIGH
An issue was discovered in Freeware Advanced Audio Decoder 2 (FAAD2) 2.8.8. It is a buffer over-read in ps_mix_phase in libfaad/ps_dec.c.
CVE-2019-15296 2 Audiocoding, Debian 2 Freeware Advanced Audio Decoder 2, Debian Linux 2024-11-21 6.8 MEDIUM 7.8 HIGH
An issue was discovered in Freeware Advanced Audio Decoder 2 (FAAD2) 2.8.8. The faad_resetbits function in libfaad/bits.c is affected by a buffer overflow vulnerability. The number of bits to be read is determined by ld->buffer_size - words*4, cast to uint32. If ld->buffer_size - words*4 is negative, a buffer overflow is later performed via getdword_n(&ld->start[words], ld->bytes_left).
CVE-2018-20362 1 Audiocoding 1 Freeware Advanced Audio Decoder 2 2024-11-21 4.3 MEDIUM 5.5 MEDIUM
A NULL pointer dereference was discovered in ifilter_bank of libfaad/filtbank.c in Freeware Advanced Audio Decoder 2 (FAAD2) 2.8.8. The vulnerability causes a segmentation fault and application crash because adding to windowed output is mishandled in the EIGHT_SHORT_SEQUENCE case.
CVE-2018-20361 1 Audiocoding 1 Freeware Advanced Audio Decoder 2 2024-11-21 4.3 MEDIUM 5.5 MEDIUM
An invalid memory address dereference was discovered in the hf_assembly function of libfaad/sbr_hfadj.c in Freeware Advanced Audio Decoder 2 (FAAD2) 2.8.8. The vulnerability causes a segmentation fault and application crash, which leads to denial of service.
CVE-2018-20360 2 Audiocoding, Debian 2 Freeware Advanced Audio Decoder 2, Debian Linux 2024-11-21 4.3 MEDIUM 5.5 MEDIUM
An invalid memory address dereference was discovered in the sbr_process_channel function of libfaad/sbr_dec.c in Freeware Advanced Audio Decoder 2 (FAAD2) 2.8.8. The vulnerability causes a segmentation fault and application crash, which leads to denial of service.
CVE-2018-20359 1 Audiocoding 1 Freeware Advanced Audio Decoder 2 2024-11-21 4.3 MEDIUM 5.5 MEDIUM
An invalid memory address dereference was discovered in the sbrDecodeSingleFramePS function of libfaad/sbr_dec.c in Freeware Advanced Audio Decoder 2 (FAAD2) 2.8.8. The vulnerability causes a segmentation fault and application crash, which leads to denial of service.
CVE-2018-20358 1 Audiocoding 1 Freeware Advanced Audio Decoder 2 2024-11-21 4.3 MEDIUM 5.5 MEDIUM
An invalid memory address dereference was discovered in the lt_prediction function of libfaad/lt_predict.c in Freeware Advanced Audio Decoder 2 (FAAD2) 2.8.8. The vulnerability causes a segmentation fault and application crash, which leads to denial of service.
CVE-2018-20357 1 Audiocoding 1 Freeware Advanced Audio Decoder 2 2024-11-21 4.3 MEDIUM 5.5 MEDIUM
A NULL pointer dereference was discovered in sbr_process_channel of libfaad/sbr_dec.c in Freeware Advanced Audio Decoder 2 (FAAD2) 2.8.8. The vulnerability causes a segmentation fault and application crash.
CVE-2018-20199 2 Audiocoding, Debian 2 Freeware Advanced Audio Decoder 2, Debian Linux 2024-11-21 4.3 MEDIUM 5.5 MEDIUM
A NULL pointer dereference was discovered in ifilter_bank of libfaad/filtbank.c in Freeware Advanced Audio Decoder 2 (FAAD2) 2.8.8. The vulnerability causes a segmentation fault and application crash, which leads to denial of service because adding to windowed output is mishandled in the ONLY_LONG_SEQUENCE case.
CVE-2018-20198 1 Audiocoding 1 Freeware Advanced Audio Decoder 2 2024-11-21 4.3 MEDIUM 5.5 MEDIUM
A NULL pointer dereference was discovered in ifilter_bank of libfaad/filtbank.c in Freeware Advanced Audio Decoder 2 (FAAD2) 2.8.8. The vulnerability causes a segmentation fault and application crash, which leads to denial of service because adding to windowed output is mishandled in the LONG_START_SEQUENCE case.
CVE-2018-20197 1 Audiocoding 1 Freeware Advanced Audio Decoder 2 2024-11-21 6.8 MEDIUM 7.8 HIGH
There is a stack-based buffer underflow in the third instance of the calculate_gain function in libfaad/sbr_hfadj.c in Freeware Advanced Audio Decoder 2 (FAAD2) 2.8.8. A crafted input will lead to a denial of service or possibly unspecified other impact because limiting the additional noise energy level is mishandled for the G_max > G case.
CVE-2018-20196 2 Audiocoding, Debian 2 Freeware Advanced Audio Decoder 2, Debian Linux 2024-11-21 6.8 MEDIUM 7.8 HIGH
There is a stack-based buffer overflow in the third instance of the calculate_gain function in libfaad/sbr_hfadj.c in Freeware Advanced Audio Decoder 2 (FAAD2) 2.8.8. A crafted input will lead to a denial of service or possibly unspecified other impact because the S_M array is mishandled.
CVE-2018-20195 1 Audiocoding 1 Freeware Advanced Audio Decoder 2 2024-11-21 4.3 MEDIUM 5.5 MEDIUM
A NULL pointer dereference was discovered in ic_predict of libfaad/ic_predict.c in Freeware Advanced Audio Decoder 2 (FAAD2) 2.8.8. The vulnerability causes a segmentation fault and application crash, which leads to denial of service.
CVE-2018-20194 1 Audiocoding 1 Freeware Advanced Audio Decoder 2 2024-11-21 6.8 MEDIUM 7.8 HIGH
There is a stack-based buffer underflow in the third instance of the calculate_gain function in libfaad/sbr_hfadj.c in Freeware Advanced Audio Decoder 2 (FAAD2) 2.8.8. A crafted input will lead to a denial of service or possibly unspecified other impact because limiting the additional noise energy level is mishandled for the G_max <= G case.
CVE-2018-19891 1 Audiocoding 1 Freeware Advanced Audio Coder 2024-11-21 4.3 MEDIUM 5.5 MEDIUM
An invalid memory address dereference was discovered in the huffcode function (libfaac/huff2.c) in Freeware Advanced Audio Coder (FAAC) 1.29.9.2. The vulnerability causes a segmentation fault and application crash, which leads to denial of service in the book 10 case.
CVE-2018-19890 1 Audiocoding 1 Freeware Advanced Audio Coder 2024-11-21 4.3 MEDIUM 5.5 MEDIUM
An invalid memory address dereference was discovered in the huffcode function (libfaac/huff2.c) in Freeware Advanced Audio Coder (FAAC) 1.29.9.2. The vulnerability causes a segmentation fault and application crash, which leads to denial of service in the book 2 case.
CVE-2018-19889 1 Audiocoding 1 Freeware Advanced Audio Coder 2024-11-21 4.3 MEDIUM 5.5 MEDIUM
An invalid memory address dereference was discovered in the huffcode function (libfaac/huff2.c) in Freeware Advanced Audio Coder (FAAC) 1.29.9.2. The vulnerability causes a segmentation fault and application crash, which leads to denial of service in the book 6 case.
CVE-2018-19888 1 Audiocoding 1 Freeware Advanced Audio Coder 2024-11-21 4.3 MEDIUM 5.5 MEDIUM
An invalid memory address dereference was discovered in the huffcode function (libfaac/huff2.c) in Freeware Advanced Audio Coder (FAAC) 1.29.9.2. The vulnerability causes a segmentation fault and application crash, which leads to denial of service in the HCB_ESC case.
CVE-2018-19887 1 Audiocoding 1 Freeware Advanced Audio Coder 2024-11-21 4.3 MEDIUM 5.5 MEDIUM
An invalid memory address dereference was discovered in the huffcode function (libfaac/huff2.c) in Freeware Advanced Audio Coder (FAAC) 1.29.9.2. The vulnerability causes a segmentation fault and application crash, which leads to denial of service in the book 4 case.
CVE-2018-19886 1 Audiocoding 1 Freeware Advanced Audio Coder 2024-11-21 4.3 MEDIUM 5.5 MEDIUM
An invalid memory address dereference was discovered in the huffcode function (libfaac/huff2.c) in Freeware Advanced Audio Coder (FAAC) 1.29.9.2. The vulnerability causes a segmentation fault and application crash, which leads to denial of service in the book 8 case.