CVE-2018-19503

HIGH 7.8CVE-2018-19503 · Published 23/11/2018 · updated 17/06/2026

In short

CVE-2018-19503 is a HIGH (CVSS 7.8) vulnerability affecting freeware advanced audio decoder 2 (audiocoding).
Chance of exploitation in the next 30 days (EPSS): 1.5%, higher than 73.4% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
freeware advanced audio decoder 2 audiocoding	`= 2.8.1`	No fix yet

Description

An issue was discovered in Freeware Advanced Audio Decoder 2 (FAAD2) 2.8.1. There was a stack-based buffer overflow in the function calculate_gain() in libfaad/sbr_hfadj.c.

References

TeamSeri0us/pocs · Exploit
seclists.org/bugtraq/2019/Sep/28
security.gentoo.org/glsa/202006-17
sourceforge.net/p/faac/bugs/240 · Exploit
debian.org/security/2019/dsa-4522

More vulnerabilities in freeware advanced audio decoder 2

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

freeware advanced audio decoder 2

audiocoding

= 2.8.1

No fix yet

More vulnerabilities in freeware advanced audio decoder 2

See all →