CVE-2018-20358

概要

参考情報

• knik0/faad2 · Exploit
• seclists.org/bugtraq/2019/Sep/28
• security.gentoo.org/glsa/202006-17
• debian.org/security/2019/dsa-4522

freeware advanced audio decoder 2 のその他の脆弱性

• CVE-2019-15296高 7.8An issue was discovered in Freeware Advanced Audio Decoder 2 (FAAD2) 2.8.8. The faad_resetbits function in libfaad/bits.c is affected by a b…
• CVE-2019-6956高 7.1An issue was discovered in Freeware Advanced Audio Decoder 2 (FAAD2) 2.8.8. It is a buffer over-read in ps_mix_phase in libfaad/ps_dec.c.
• CVE-2018-20362中 5.5A NULL pointer dereference was discovered in ifilter_bank of libfaad/filtbank.c in Freeware Advanced Audio Decoder 2 (FAAD2) 2.8.8. The vuln…
• CVE-2018-20361中 5.5An invalid memory address dereference was discovered in the hf_assembly function of libfaad/sbr_hfadj.c in Freeware Advanced Audio Decoder 2…
• CVE-2018-20360中 5.5An invalid memory address dereference was discovered in the sbr_process_channel function of libfaad/sbr_dec.c in Freeware Advanced Audio Dec…