AudioCoding Freeware Advanced Audio Decoder 2 (FAAD2) 2.8.8
Approved changes feed: RSS · Atom
cpe:2.3:a:audiocoding:freeware_advanced_audio_decoder_2:2.8.8:*:*:*:*:*:*:*
part: a version: 2.8.8 update: *
| Vendor | Audiocoding (d0ce2024-dd72-510b-b1dc-e9c31f4fb897) |
|---|---|
| Product | Freeware Advanced Audio Decoder 2 (340e1ce1-66f3-5e0f-b65f-c2749fa5cec5) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:deb/debian/faad2 |
purl2cpe | 2026-06-01 10:11:43.638945 |
pkg:deb/ubuntu/faad2 |
purl2cpe | 2026-06-01 10:11:43.638947 |
pkg:github/knik0/faad2 |
purl2cpe | 2026-06-01 10:11:43.638948 |
pkg:github/ralph-irving/faad2 |
purl2cpe | 2026-06-01 10:11:43.638949 |
pkg:rpm/opensuse/faad2 |
purl2cpe | 2026-06-01 10:11:43.638951 |
pkg:sourceforge/faac |
purl2cpe | 2026-06-01 10:11:43.638952 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2019-15296 |
vulnerable | 2026-06-08 05:12:57.190361 |
Details available
An issue was discovered in Freeware Advanced Audio Decoder 2 (FAAD2) 2.8.8. The faad_resetbits function in libfaad/bits.c is affected by a buffer overflow vulnerability. The number of bits to be read is determined by ld->buffer_size - words*4, cast to uint32. If ld->buffer_size - words*4 is negative, a buffer overflow is later performed via getdword_n(&ld->start[words], ld->bytes_left).
Published: 2019-08-21T06:07:57.000Z
Updated: 2024-08-05T00:42:03.734Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-20362 |
vulnerable | 2026-06-08 05:11:27.097084 |
Details available
A NULL pointer dereference was discovered in ifilter_bank of libfaad/filtbank.c in Freeware Advanced Audio Decoder 2 (FAAD2) 2.8.8. The vulnerability causes a segmentation fault and application crash because adding to windowed output is mishandled in the EIGHT_SHORT_SEQUENCE case.
Published: 2018-12-22T15:00:00.000Z
Updated: 2024-08-05T11:58:19.172Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-20361 |
vulnerable | 2026-06-08 05:11:27.096560 |
Details available
An invalid memory address dereference was discovered in the hf_assembly function of libfaad/sbr_hfadj.c in Freeware Advanced Audio Decoder 2 (FAAD2) 2.8.8. The vulnerability causes a segmentation fault and application crash, which leads to denial of service.
Published: 2018-12-22T15:00:00.000Z
Updated: 2024-08-05T11:58:19.165Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-20359 |
vulnerable | 2026-06-08 05:11:27.095398 |
Details available
An invalid memory address dereference was discovered in the sbrDecodeSingleFramePS function of libfaad/sbr_dec.c in Freeware Advanced Audio Decoder 2 (FAAD2) 2.8.8. The vulnerability causes a segmentation fault and application crash, which leads to denial of service.
Published: 2018-12-22T15:00:00.000Z
Updated: 2024-08-05T11:58:19.439Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-20358 |
vulnerable | 2026-06-08 05:11:27.095084 |
Details available
An invalid memory address dereference was discovered in the lt_prediction function of libfaad/lt_predict.c in Freeware Advanced Audio Decoder 2 (FAAD2) 2.8.8. The vulnerability causes a segmentation fault and application crash, which leads to denial of service.
Published: 2018-12-22T15:00:00.000Z
Updated: 2024-08-05T11:58:19.487Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-20357 |
vulnerable | 2026-06-08 05:11:27.094673 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-20198 |
vulnerable | 2026-06-08 05:11:26.837583 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-20197 |
vulnerable | 2026-06-08 05:11:26.837114 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-20196 |
vulnerable | 2026-06-08 05:11:26.836712 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-20195 |
vulnerable | 2026-06-08 05:11:26.836318 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-20194 |
vulnerable | 2026-06-08 05:11:26.835876 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.