PatchTheCVEfdkaac vulnerabilities and fixes
Recent CVEs affecting fdkaac, with upgrade or downgrade steps. 4 tracked.
fdkaac has 4 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 3. Most recent: 2023-06-14. Highest priority: CVE-2022-37781 (score 40/100).
- CVE-2023-34824 MEDIUM 5.5 UPGRADE fdkaac before 1.0.5 was discovered to contain a heap buffer overflow in caf_info function in caf_reader.c.
- CVE-2023-34823 MEDIUM 5.5 UPGRADE fdkaac before 1.0.5 was discovered to contain a stack overflow in read_callback function in src/main.c.
- CVE-2022-37781 HIGH 7.8 DOWNGRADE fdkaac v1.0.3 was discovered to contain a heap buffer overflow via __interceptor_memcpy.part.46 at /sanitizer_
- CVE-2022-36148 MEDIUM 5.5 UPGRADE fdkaac commit 53fe239 was discovered to contain a floating point exception (FPE) via wav_open at /src/wav_read
FAQ
How do I fix fdkaac vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is fdkaac being exploited right now?
None of the tracked fdkaac CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which fdkaac CVE should I patch first?
CVE-2022-37781 currently ranks highest (40/100): fdkaac v1.0.3 was discovered to contain a heap buffer overflow via __interceptor_memcpy.part.46 at /sanitizer_.