PatchTheCVE: libaacplushttps://patchthecve.com/CVEs with upgrade or downgrade fix stepsCVE-2017-7605: aacplusenc.c in HE-AAC+ Codec (aka libaacplus) 2.0.2 has an assertion failure, which might allow remote attackhttps://patchthecve.com/cve/CVE-2017-7605.htmlhttps://patchthecve.com/cve/CVE-2017-7605.htmlWed, 17 Jun 2026 01:24:45 +0000HIGH 7.8: aacplusenc.c in HE-AAC+ Codec (aka libaacplus) 2.0.2 has an assertion failure, which might allow remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a crafted audio file.CVE-2017-7604: au_channel.h in HE-AAC+ Codec (aka libaacplus) 2.0.2 has a left-shift undefined behavior issue, which might alhttps://patchthecve.com/cve/CVE-2017-7604.htmlhttps://patchthecve.com/cve/CVE-2017-7604.htmlWed, 17 Jun 2026 01:24:45 +0000HIGH 7.8: au_channel.h in HE-AAC+ Codec (aka libaacplus) 2.0.2 has a left-shift undefined behavior issue, which might allow remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a crafted audio file.CVE-2017-7603: au_channel.h in HE-AAC+ Codec (aka libaacplus) 2.0.2 has a signed integer overflow, which might allow remote ahttps://patchthecve.com/cve/CVE-2017-7603.htmlhttps://patchthecve.com/cve/CVE-2017-7603.htmlWed, 17 Jun 2026 01:24:44 +0000HIGH 7.8: au_channel.h in HE-AAC+ Codec (aka libaacplus) 2.0.2 has a signed integer overflow, which might allow remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a crafted audio file.