Debian Faad2 vulnerabilities

CVE-2017-9222 [MEDIUM] CVE-2017-9222: faad2 - The mp4ff_parse_tag function in common/mp4ff/mp4meta.c in Freeware Advanced Audi... The mp4ff_parse_tag function in common/mp4ff/mp4meta.c in Freeware Advanced Audio Decoder 2 (FAAD2) 2.7 allows remote attackers to cause a denial of service (infinite loop and CPU consumption) via a crafted mp4 file. Scope: local bookworm: resolved (fixed in 2.8.1-1) bullseye: resolved (fixed in 2.8.1-1) forky: resolved (fixed in 2.8.1-1) sid: resolved (fixed in 2.8.1

CVE-2017-9257 [MEDIUM] CVE-2017-9257: faad2 - The mp4ff_read_ctts function in common/mp4ff/mp4atom.c in Freeware Advanced Audi... The mp4ff_read_ctts function in common/mp4ff/mp4atom.c in Freeware Advanced Audio Decoder 2 (FAAD2) 2.7 allows remote attackers to cause a denial of service (large loop and CPU consumption) via a crafted mp4 file. Scope: local bookworm: resolved (fixed in 2.8.1-1) bullseye: resolved (fixed in 2.8.1-1) forky: resolved (fixed in 2.8.1-1) sid: resolved (fixed in 2.8.1-1)

CVE-2017-9255 [MEDIUM] CVE-2017-9255: faad2 - The mp4ff_read_stsc function in common/mp4ff/mp4atom.c in Freeware Advanced Audi... The mp4ff_read_stsc function in common/mp4ff/mp4atom.c in Freeware Advanced Audio Decoder 2 (FAAD2) 2.7 allows remote attackers to cause a denial of service (large loop and CPU consumption) via a crafted mp4 file. Scope: local bookworm: resolved (fixed in 2.8.1-1) bullseye: resolved (fixed in 2.8.1-1) forky: resolved (fixed in 2.8.1-1) sid: resolved (fixed in 2.8.1-1)

CVE-2017-9254 [MEDIUM] CVE-2017-9254: faad2 - The mp4ff_read_stts function in common/mp4ff/mp4atom.c in Freeware Advanced Audi... The mp4ff_read_stts function in common/mp4ff/mp4atom.c in Freeware Advanced Audio Decoder 2 (FAAD2) 2.7 allows remote attackers to cause a denial of service (large loop and CPU consumption) via a crafted mp4 file. Scope: local bookworm: resolved (fixed in 2.8.1-1) bullseye: resolved (fixed in 2.8.1-1) forky: resolved (fixed in 2.8.1-1) sid: resolved (fixed in 2.8.1-1)

CVE-2017-9256 [MEDIUM] CVE-2017-9256: faad2 - The mp4ff_read_stco function in common/mp4ff/mp4atom.c in Freeware Advanced Audi... The mp4ff_read_stco function in common/mp4ff/mp4atom.c in Freeware Advanced Audio Decoder 2 (FAAD2) 2.7 allows remote attackers to cause a denial of service (large loop and CPU consumption) via a crafted mp4 file. Scope: local bookworm: resolved (fixed in 2.8.1-1) bullseye: resolved (fixed in 2.8.1-1) forky: resolved (fixed in 2.8.1-1) sid: resolved (fixed in 2.8.1-1)

CVE-2018-20357 [MEDIUM] CVE-2018-20357: faad2 - A NULL pointer dereference was discovered in sbr_process_channel of libfaad/sbr_... A NULL pointer dereference was discovered in sbr_process_channel of libfaad/sbr_dec.c in Freeware Advanced Audio Decoder 2 (FAAD2) 2.8.8. The vulnerability causes a segmentation fault and application crash. Scope: local bookworm: resolved (fixed in 2.8.8-2) bullseye: resolved (fixed in 2.8.8-2) forky: resolved (fixed in 2.8.8-2) sid: resolved (fixed in 2.8.8-2) trix

CVE-2018-20362 [MEDIUM] CVE-2018-20362: faad2 - A NULL pointer dereference was discovered in ifilter_bank of libfaad/filtbank.c ... A NULL pointer dereference was discovered in ifilter_bank of libfaad/filtbank.c in Freeware Advanced Audio Decoder 2 (FAAD2) 2.8.8. The vulnerability causes a segmentation fault and application crash because adding to windowed output is mishandled in the EIGHT_SHORT_SEQUENCE case. Scope: local bookworm: resolved (fixed in 2.8.8-2) bullseye: resolved (fixed in 2.8.8-

CVE-2018-20195 [MEDIUM] CVE-2018-20195: faad2 - A NULL pointer dereference was discovered in ic_predict of libfaad/ic_predict.c ... A NULL pointer dereference was discovered in ic_predict of libfaad/ic_predict.c in Freeware Advanced Audio Decoder 2 (FAAD2) 2.8.8. The vulnerability causes a segmentation fault and application crash, which leads to denial of service. Scope: local bookworm: resolved (fixed in 2.8.8-2) bullseye: resolved (fixed in 2.8.8-2) forky: resolved (fixed in 2.8.8-2) sid: reso

CVE-2018-20359 [MEDIUM] CVE-2018-20359: faad2 - An invalid memory address dereference was discovered in the sbrDecodeSingleFrame... An invalid memory address dereference was discovered in the sbrDecodeSingleFramePS function of libfaad/sbr_dec.c in Freeware Advanced Audio Decoder 2 (FAAD2) 2.8.8. The vulnerability causes a segmentation fault and application crash, which leads to denial of service. Scope: local bookworm: resolved (fixed in 2.8.8-2) bullseye: resolved (fixed in 2.8.8-2) forky: reso

CVE-2018-20358 [MEDIUM] CVE-2018-20358: faad2 - An invalid memory address dereference was discovered in the lt_prediction functi... An invalid memory address dereference was discovered in the lt_prediction function of libfaad/lt_predict.c in Freeware Advanced Audio Decoder 2 (FAAD2) 2.8.8. The vulnerability causes a segmentation fault and application crash, which leads to denial of service. Scope: local bookworm: resolved (fixed in 2.8.8-2) bullseye: resolved (fixed in 2.8.8-2) forky: resolved (

CVE-2018-20360 [MEDIUM] CVE-2018-20360: faad2 - An invalid memory address dereference was discovered in the sbr_process_channel ... An invalid memory address dereference was discovered in the sbr_process_channel function of libfaad/sbr_dec.c in Freeware Advanced Audio Decoder 2 (FAAD2) 2.8.8. The vulnerability causes a segmentation fault and application crash, which leads to denial of service. Scope: local bookworm: resolved (fixed in 2.8.8-3.1) bullseye: resolved (fixed in 2.8.8-3.1) forky: res

CVE-2018-20199 [MEDIUM] CVE-2018-20199: faad2 - A NULL pointer dereference was discovered in ifilter_bank of libfaad/filtbank.c ... A NULL pointer dereference was discovered in ifilter_bank of libfaad/filtbank.c in Freeware Advanced Audio Decoder 2 (FAAD2) 2.8.8. The vulnerability causes a segmentation fault and application crash, which leads to denial of service because adding to windowed output is mishandled in the ONLY_LONG_SEQUENCE case. Scope: local bookworm: resolved (fixed in 2.8.8-3.1) b

CVE-2017-9219 [MEDIUM] CVE-2017-9219: faad2 - The mp4ff_read_stsc function in common/mp4ff/mp4atom.c in Freeware Advanced Audi... The mp4ff_read_stsc function in common/mp4ff/mp4atom.c in Freeware Advanced Audio Decoder 2 (FAAD2) 2.7 allows remote attackers to cause a denial of service (memory allocation error and application crash) via a crafted mp4 file. Scope: local bookworm: resolved (fixed in 2.8.1-1) bullseye: resolved (fixed in 2.8.1-1) forky: resolved (fixed in 2.8.1-1) sid: resolved (fi

CVE-2017-9218 [MEDIUM] CVE-2017-9218: faad2 - The mp4ff_read_stsd function in common/mp4ff/mp4atom.c in Freeware Advanced Audi... The mp4ff_read_stsd function in common/mp4ff/mp4atom.c in Freeware Advanced Audio Decoder 2 (FAAD2) 2.7 allows remote attackers to cause a denial of service (invalid memory read and application crash) via a crafted mp4 file. Scope: local bookworm: resolved (fixed in 2.8.1-1) bullseye: resolved (fixed in 2.8.1-1) forky: resolved (fixed in 2.8.1-1) sid: resolved (fixed

CVE-2017-9223 [MEDIUM] CVE-2017-9223: faad2 - The mp4ff_read_stts function in common/mp4ff/mp4atom.c in Freeware Advanced Audi... The mp4ff_read_stts function in common/mp4ff/mp4atom.c in Freeware Advanced Audio Decoder 2 (FAAD2) 2.7 allows remote attackers to cause a denial of service (invalid memory read and application crash) via a crafted mp4 file. Scope: local bookworm: resolved (fixed in 2.8.1-1) bullseye: resolved (fixed in 2.8.1-1) forky: resolved (fixed in 2.8.1-1) sid: resolved (fixed

CVE-2017-9221 [MEDIUM] CVE-2017-9221: faad2 - The mp4ff_read_mdhd function in common/mp4ff/mp4atom.c in Freeware Advanced Audi... The mp4ff_read_mdhd function in common/mp4ff/mp4atom.c in Freeware Advanced Audio Decoder 2 (FAAD2) 2.7 allows remote attackers to cause a denial of service (invalid memory read and application crash) via a crafted mp4 file. Scope: local bookworm: resolved (fixed in 2.8.1-1) bullseye: resolved (fixed in 2.8.1-1) forky: resolved (fixed in 2.8.1-1) sid: resolved (fixed