Faad2 Project Faad2 vulnerabilities

39 known vulnerabilities affecting faad2_project/faad2.

Total CVEs

CISA KEV

Public exploits

Exploited in wild

Severity breakdown

CRITICAL2HIGH14MEDIUM23

Vulnerabilities

Page 2 of 2

CVE-2018-20199MEDIUMCVSS 5.5≥ 0, < 2.8.8-3.12018-12-18

CVE-2018-20199 [MEDIUM] CVE-2018-20199: A NULL pointer dereference was discovered in ifilter_bank of libfaad/filtbank A NULL pointer dereference was discovered in ifilter_bank of libfaad/filtbank.c in Freeware Advanced Audio Decoder 2 (FAAD2) 2.8.8. The vulnerability causes a segmentation fault and application crash, which leads to denial of service because adding to windowed output is mishandled in the ONLY_LONG_SEQUENCE case.

osv

CVE-2018-20195MEDIUMCVSS 5.5≥ 0, < 2.8.8-22018-12-18

CVE-2018-20195 [MEDIUM] CVE-2018-20195: A NULL pointer dereference was discovered in ic_predict of libfaad/ic_predict A NULL pointer dereference was discovered in ic_predict of libfaad/ic_predict.c in Freeware Advanced Audio Decoder 2 (FAAD2) 2.8.8. The vulnerability causes a segmentation fault and application crash, which leads to denial of service.

osv

CVE-2018-20198MEDIUMCVSS 5.5≥ 0, < 2.8.8-22018-12-18

CVE-2018-20198 [MEDIUM] CVE-2018-20198: A NULL pointer dereference was discovered in ifilter_bank of libfaad/filtbank A NULL pointer dereference was discovered in ifilter_bank of libfaad/filtbank.c in Freeware Advanced Audio Decoder 2 (FAAD2) 2.8.8. The vulnerability causes a segmentation fault and application crash, which leads to denial of service because adding to windowed output is mishandled in the LONG_START_SEQUENCE case.

osv

CVE-2018-19502HIGHCVSS 7.8≥ 0, < 2.8.8-32018-11-23

CVE-2018-19502 [HIGH] CVE-2018-19502: An issue was discovered in Freeware Advanced Audio Decoder 2 (FAAD2) 2 An issue was discovered in Freeware Advanced Audio Decoder 2 (FAAD2) 2.8.1. There was a heap-based buffer overflow in the function excluded_channels() in libfaad/syntax.c.

osv

CVE-2018-19504HIGHCVSS 7.8≥ 0, < 2.8.8-22018-11-23

CVE-2018-19504 [HIGH] CVE-2018-19504: An issue was discovered in Freeware Advanced Audio Decoder 2 (FAAD2) 2 An issue was discovered in Freeware Advanced Audio Decoder 2 (FAAD2) 2.8.1. There is a NULL pointer dereference in ifilter_bank() in libfaad/filtbank.c.

osv

CVE-2018-19503HIGHCVSS 7.8≥ 0, < 2.8.8-22018-11-23

CVE-2018-19503 [HIGH] CVE-2018-19503: An issue was discovered in Freeware Advanced Audio Decoder 2 (FAAD2) 2 An issue was discovered in Freeware Advanced Audio Decoder 2 (FAAD2) 2.8.1. There was a stack-based buffer overflow in the function calculate_gain() in libfaad/sbr_hfadj.c.

osv

CVE-2017-9254MEDIUMCVSS 5.5≥ 0, < 2.8.1-12017-06-27

CVE-2017-9254 [MEDIUM] CVE-2017-9254: The mp4ff_read_stts function in common/mp4ff/mp4atom The mp4ff_read_stts function in common/mp4ff/mp4atom.c in Freeware Advanced Audio Decoder 2 (FAAD2) 2.7 allows remote attackers to cause a denial of service (large loop and CPU consumption) via a crafted mp4 file.

osv

CVE-2017-9219MEDIUMCVSS 5.5≥ 0, < 2.8.1-12017-06-27

CVE-2017-9219 [MEDIUM] CVE-2017-9219: The mp4ff_read_stsc function in common/mp4ff/mp4atom The mp4ff_read_stsc function in common/mp4ff/mp4atom.c in Freeware Advanced Audio Decoder 2 (FAAD2) 2.7 allows remote attackers to cause a denial of service (memory allocation error and application crash) via a crafted mp4 file.

osv

CVE-2017-9221MEDIUMCVSS 5.5≥ 0, < 2.8.1-12017-06-27

CVE-2017-9221 [MEDIUM] CVE-2017-9221: The mp4ff_read_mdhd function in common/mp4ff/mp4atom The mp4ff_read_mdhd function in common/mp4ff/mp4atom.c in Freeware Advanced Audio Decoder 2 (FAAD2) 2.7 allows remote attackers to cause a denial of service (invalid memory read and application crash) via a crafted mp4 file.

osv

CVE-2017-9223MEDIUMCVSS 5.5≥ 0, < 2.8.1-12017-06-27

CVE-2017-9223 [MEDIUM] CVE-2017-9223: The mp4ff_read_stts function in common/mp4ff/mp4atom The mp4ff_read_stts function in common/mp4ff/mp4atom.c in Freeware Advanced Audio Decoder 2 (FAAD2) 2.7 allows remote attackers to cause a denial of service (invalid memory read and application crash) via a crafted mp4 file.

osv

CVE-2017-9257MEDIUMCVSS 5.5≥ 0, < 2.8.1-12017-06-27

CVE-2017-9257 [MEDIUM] CVE-2017-9257: The mp4ff_read_ctts function in common/mp4ff/mp4atom The mp4ff_read_ctts function in common/mp4ff/mp4atom.c in Freeware Advanced Audio Decoder 2 (FAAD2) 2.7 allows remote attackers to cause a denial of service (large loop and CPU consumption) via a crafted mp4 file.

osv

CVE-2017-9218MEDIUMCVSS 5.5≥ 0, < 2.8.1-12017-06-27

CVE-2017-9218 [MEDIUM] CVE-2017-9218: The mp4ff_read_stsd function in common/mp4ff/mp4atom The mp4ff_read_stsd function in common/mp4ff/mp4atom.c in Freeware Advanced Audio Decoder 2 (FAAD2) 2.7 allows remote attackers to cause a denial of service (invalid memory read and application crash) via a crafted mp4 file.

osv

CVE-2017-9222MEDIUMCVSS 5.5≥ 0, < 2.8.1-12017-06-27

CVE-2017-9222 [MEDIUM] CVE-2017-9222: The mp4ff_parse_tag function in common/mp4ff/mp4meta The mp4ff_parse_tag function in common/mp4ff/mp4meta.c in Freeware Advanced Audio Decoder 2 (FAAD2) 2.7 allows remote attackers to cause a denial of service (infinite loop and CPU consumption) via a crafted mp4 file.

osv

CVE-2017-9255MEDIUMCVSS 5.5≥ 0, < 2.8.1-12017-06-27

CVE-2017-9255 [MEDIUM] CVE-2017-9255: The mp4ff_read_stsc function in common/mp4ff/mp4atom The mp4ff_read_stsc function in common/mp4ff/mp4atom.c in Freeware Advanced Audio Decoder 2 (FAAD2) 2.7 allows remote attackers to cause a denial of service (large loop and CPU consumption) via a crafted mp4 file.

osv

CVE-2017-9220MEDIUMCVSS 5.5≥ 0, < 2.8.1-12017-06-27

CVE-2017-9220 [MEDIUM] CVE-2017-9220: The mp4ff_read_stco function in common/mp4ff/mp4atom The mp4ff_read_stco function in common/mp4ff/mp4atom.c in Freeware Advanced Audio Decoder 2 (FAAD2) 2.7 allows remote attackers to cause a denial of service (memory allocation error) via a crafted mp4 file.

osv

CVE-2017-9253MEDIUMCVSS 5.5≥ 0, < 2.8.1-12017-06-27

CVE-2017-9253 [MEDIUM] CVE-2017-9253: The mp4ff_read_stsd function in common/mp4ff/mp4atom The mp4ff_read_stsd function in common/mp4ff/mp4atom.c in Freeware Advanced Audio Decoder 2 (FAAD2) 2.7 allows remote attackers to cause a denial of service (large loop and CPU consumption) via a crafted mp4 file.

osv

CVE-2017-9256MEDIUMCVSS 5.5≥ 0, < 2.8.1-12017-06-27

CVE-2017-9256 [MEDIUM] CVE-2017-9256: The mp4ff_read_stco function in common/mp4ff/mp4atom The mp4ff_read_stco function in common/mp4ff/mp4atom.c in Freeware Advanced Audio Decoder 2 (FAAD2) 2.7 allows remote attackers to cause a denial of service (large loop and CPU consumption) via a crafted mp4 file.

osv

CVE-2008-5244CRITICALCVSS 10.0≥ 0, < 2.6.1-12008-11-26

CVE-2008-5244 [CRITICAL] CVE-2008-5244: Unspecified vulnerability in xine-lib before 1 Unspecified vulnerability in xine-lib before 1.1.15 has unknown impact and attack vectors related to libfaad. NOTE: due to the lack of details, it is not clear whether this is an issue in xine-lib or in libfaad.

osv

CVE-2008-4201CRITICALCVSS 9.3≥ 0, < 2.6.1-3.12008-09-24

CVE-2008-4201 [CRITICAL] CVE-2008-4201: Heap-based buffer overflow in the decodeMP4file function (frontend/main Heap-based buffer overflow in the decodeMP4file function (frontend/main.c) in FAAD2 2.6.1 and earlier allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted MPEG-4 (MP4) file.

osv

← Previous2 / 2