CVE-2018-20360

概要

参考情報

• knik0/faad2 · Exploit
• lists.debian.org/debian-lts-announce/2019/08/msg00033.html · Mailing List
• lists.debian.org/debian-lts-announce/2021/10/msg00020.html · Mailing List
• security.gentoo.org/glsa/202006-17 · Third Party Advisory
• debian.org/security/2022/dsa-5109 · Third Party Advisory

freeware advanced audio decoder 2 のその他の脆弱性

• CVE-2019-15296高 7.8An issue was discovered in Freeware Advanced Audio Decoder 2 (FAAD2) 2.8.8. The faad_resetbits function in libfaad/bits.c is affected by a b…
• CVE-2019-6956高 7.1An issue was discovered in Freeware Advanced Audio Decoder 2 (FAAD2) 2.8.8. It is a buffer over-read in ps_mix_phase in libfaad/ps_dec.c.
• CVE-2018-20362中 5.5A NULL pointer dereference was discovered in ifilter_bank of libfaad/filtbank.c in Freeware Advanced Audio Decoder 2 (FAAD2) 2.8.8. The vuln…
• CVE-2018-20361中 5.5An invalid memory address dereference was discovered in the hf_assembly function of libfaad/sbr_hfadj.c in Freeware Advanced Audio Decoder 2…
• CVE-2018-20359中 5.5An invalid memory address dereference was discovered in the sbrDecodeSingleFramePS function of libfaad/sbr_dec.c in Freeware Advanced Audio …