freeware advanced audio decoder 2 vulnerabilities and fixes

Recent CVEs affecting freeware advanced audio decoder 2, with upgrade or downgrade steps. 28 tracked.

Also searched as: freewareadvancedaudiodecoder2.

freeware advanced audio decoder 2 has 28 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 3. Most recent: 2019-08-21. Highest priority: CVE-2018-20196 (score 55/100).

• CVE-2019-6956 HIGH 7.1 UPGRADE MITIGATE An issue was discovered in Freeware Advanced Audio Decoder 2 (FAAD2) 2.8.8
• CVE-2019-15296 HIGH 7.8 DOWNGRADE MITIGATE An issue was discovered in Freeware Advanced Audio Decoder 2 (FAAD2) 2.8.8
• CVE-2018-20362 MEDIUM 5.5 DOWNGRADE A NULL pointer dereference was discovered in ifilter_bank of libfaad/filtbank.c in Freeware Advanced Audio Dec
• CVE-2018-20361 MEDIUM 5.5 DOWNGRADE An invalid memory address dereference was discovered in the hf_assembly function of libfaad/sbr_hfadj.c in Fre
• CVE-2018-20360 MEDIUM 5.5 UPGRADE MITIGATE An invalid memory address dereference was discovered in the sbr_process_channel function of libfaad/sbr_dec.c
• CVE-2018-20359 MEDIUM 5.5 DOWNGRADE An invalid memory address dereference was discovered in the sbrDecodeSingleFramePS function of libfaad/sbr_dec
• CVE-2018-20358 MEDIUM 5.5 DOWNGRADE An invalid memory address dereference was discovered in the lt_prediction function of libfaad/lt_predict.c in
• CVE-2018-20357 MEDIUM 5.5 DOWNGRADE A NULL pointer dereference was discovered in sbr_process_channel of libfaad/sbr_dec.c in Freeware Advanced Aud
• CVE-2018-20199 MEDIUM 5.5 UPGRADE MITIGATE A NULL pointer dereference was discovered in ifilter_bank of libfaad/filtbank.c in Freeware Advanced Audio Dec
• CVE-2018-20198 MEDIUM 5.5 DOWNGRADE A NULL pointer dereference was discovered in ifilter_bank of libfaad/filtbank.c in Freeware Advanced Audio Dec
• CVE-2018-20197 HIGH 7.8 DOWNGRADE There is a stack-based buffer underflow in the third instance of the calculate_gain function in libfaad/sbr_hf
• CVE-2018-20196 HIGH 7.8 DOWNGRADE MITIGATE There is a stack-based buffer overflow in the third instance of the calculate_gain function in libfaad/sbr_hfa
• CVE-2018-20195 MEDIUM 5.5 DOWNGRADE A NULL pointer dereference was discovered in ic_predict of libfaad/ic_predict.c in Freeware Advanced Audio Dec
• CVE-2018-20194 HIGH 7.8 DOWNGRADE There is a stack-based buffer underflow in the third instance of the calculate_gain function in libfaad/sbr_hf
• CVE-2018-19504 HIGH 7.8 DOWNGRADE An issue was discovered in Freeware Advanced Audio Decoder 2 (FAAD2) 2.8.1
• CVE-2018-19503 HIGH 7.8 DOWNGRADE An issue was discovered in Freeware Advanced Audio Decoder 2 (FAAD2) 2.8.1
• CVE-2018-19502 HIGH 7.8 DOWNGRADE An issue was discovered in Freeware Advanced Audio Decoder 2 (FAAD2) 2.8.1
• CVE-2017-9257 MEDIUM 5.5 DOWNGRADE The mp4ff_read_ctts function in common/mp4ff/mp4atom.c in Freeware Advanced Audio Decoder 2 (FAAD2) 2.7 allows
• CVE-2017-9256 MEDIUM 5.5 DOWNGRADE The mp4ff_read_stco function in common/mp4ff/mp4atom.c in Freeware Advanced Audio Decoder 2 (FAAD2) 2.7 allows
• CVE-2017-9255 MEDIUM 5.5 DOWNGRADE The mp4ff_read_stsc function in common/mp4ff/mp4atom.c in Freeware Advanced Audio Decoder 2 (FAAD2) 2.7 allows
• CVE-2017-9254 MEDIUM 5.5 DOWNGRADE The mp4ff_read_stts function in common/mp4ff/mp4atom.c in Freeware Advanced Audio Decoder 2 (FAAD2) 2.7 allows
• CVE-2017-9253 MEDIUM 5.5 DOWNGRADE The mp4ff_read_stsd function in common/mp4ff/mp4atom.c in Freeware Advanced Audio Decoder 2 (FAAD2) 2.7 allows
• CVE-2017-9223 MEDIUM 5.5 DOWNGRADE The mp4ff_read_stts function in common/mp4ff/mp4atom.c in Freeware Advanced Audio Decoder 2 (FAAD2) 2.7 allows
• CVE-2017-9222 MEDIUM 5.5 DOWNGRADE The mp4ff_parse_tag function in common/mp4ff/mp4meta.c in Freeware Advanced Audio Decoder 2 (FAAD2) 2.7 allows
• CVE-2017-9221 MEDIUM 5.5 DOWNGRADE The mp4ff_read_mdhd function in common/mp4ff/mp4atom.c in Freeware Advanced Audio Decoder 2 (FAAD2) 2.7 allows
• CVE-2017-9220 MEDIUM 5.5 DOWNGRADE The mp4ff_read_stco function in common/mp4ff/mp4atom.c in Freeware Advanced Audio Decoder 2 (FAAD2) 2.7 allows
• CVE-2017-9219 MEDIUM 5.5 DOWNGRADE The mp4ff_read_stsc function in common/mp4ff/mp4atom.c in Freeware Advanced Audio Decoder 2 (FAAD2) 2.7 allows
• CVE-2017-9218 MEDIUM 5.5 DOWNGRADE The mp4ff_read_stsd function in common/mp4ff/mp4atom.c in Freeware Advanced Audio Decoder 2 (FAAD2) 2.7 allows

FAQ

How do I fix freeware advanced audio decoder 2 vulnerabilities?

Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.

Is freeware advanced audio decoder 2 being exploited right now?

None of the tracked freeware advanced audio decoder 2 CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.

Which freeware advanced audio decoder 2 CVE should I patch first?

CVE-2018-20196 currently ranks highest (55/100): There is a stack-based buffer overflow in the third instance of the calculate_gain function in libfaad/sbr_hfa.

RSS feed for freeware advanced audio decoder 2 · ← Back to latest CVEs