freeware advanced audio coder vulnerabilities and fixes

Recent CVEs affecting freeware advanced audio coder, with upgrade or downgrade steps. 8 tracked.

Also searched as: freewareadvancedaudiocoder.

freeware advanced audio coder has 8 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 0. Most recent: 2018-12-06. Highest priority: CVE-2017-9130 (score 46/100).

CVE-2018-19891 MEDIUM 5.5 DOWNGRADE An invalid memory address dereference was discovered in the huffcode function (libfaac/huff2.c) in Freeware Ad
CVE-2018-19890 MEDIUM 5.5 DOWNGRADE An invalid memory address dereference was discovered in the huffcode function (libfaac/huff2.c) in Freeware Ad
CVE-2018-19889 MEDIUM 5.5 DOWNGRADE An invalid memory address dereference was discovered in the huffcode function (libfaac/huff2.c) in Freeware Ad
CVE-2018-19888 MEDIUM 5.5 DOWNGRADE An invalid memory address dereference was discovered in the huffcode function (libfaac/huff2.c) in Freeware Ad
CVE-2018-19887 MEDIUM 5.5 DOWNGRADE An invalid memory address dereference was discovered in the huffcode function (libfaac/huff2.c) in Freeware Ad
CVE-2018-19886 MEDIUM 5.5 DOWNGRADE An invalid memory address dereference was discovered in the huffcode function (libfaac/huff2.c) in Freeware Ad
CVE-2017-9130 MEDIUM 5.5 DOWNGRADE The faacEncOpen function in libfaac/frame.c in Freeware Advanced Audio Coder (FAAC) 1.28 allows remote attacke
CVE-2017-9129 MEDIUM 5.5 DOWNGRADE The wav_open_read function in frontend/input.c in Freeware Advanced Audio Coder (FAAC) 1.28 allows remote atta

FAQ

How do I fix freeware advanced audio coder vulnerabilities?

Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.

Is freeware advanced audio coder being exploited right now?

None of the tracked freeware advanced audio coder CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.

Which freeware advanced audio coder CVE should I patch first?

CVE-2017-9130 currently ranks highest (46/100): The faacEncOpen function in libfaac/frame.c in Freeware Advanced Audio Coder (FAAC) 1.28 allows remote attacke.

RSS feed for freeware advanced audio coder · ← Back to latest CVEs