audiocoding vulnerabilities

Recent CVEs affecting audiocoding products. 23 tracked.

audiocoding has 23 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 3. Most recent: 2019-08-21. Highest priority: CVE-2018-20196 (score 55/100).

• CVE-2019-6956 HIGH 7.1 UPGRADE MITIGATE An issue was discovered in Freeware Advanced Audio Decoder 2 (FAAD2) 2.8.8
• CVE-2019-15296 HIGH 7.8 DOWNGRADE MITIGATE An issue was discovered in Freeware Advanced Audio Decoder 2 (FAAD2) 2.8.8
• CVE-2018-20362 MEDIUM 5.5 DOWNGRADE A NULL pointer dereference was discovered in ifilter_bank of libfaad/filtbank.c in Freeware Advanced Audio Dec
• CVE-2018-20361 MEDIUM 5.5 DOWNGRADE An invalid memory address dereference was discovered in the hf_assembly function of libfaad/sbr_hfadj.c in Fre
• CVE-2018-20360 MEDIUM 5.5 UPGRADE MITIGATE An invalid memory address dereference was discovered in the sbr_process_channel function of libfaad/sbr_dec.c
• CVE-2018-20359 MEDIUM 5.5 DOWNGRADE An invalid memory address dereference was discovered in the sbrDecodeSingleFramePS function of libfaad/sbr_dec
• CVE-2018-20358 MEDIUM 5.5 DOWNGRADE An invalid memory address dereference was discovered in the lt_prediction function of libfaad/lt_predict.c in
• CVE-2018-20357 MEDIUM 5.5 DOWNGRADE A NULL pointer dereference was discovered in sbr_process_channel of libfaad/sbr_dec.c in Freeware Advanced Aud
• CVE-2018-20199 MEDIUM 5.5 UPGRADE MITIGATE A NULL pointer dereference was discovered in ifilter_bank of libfaad/filtbank.c in Freeware Advanced Audio Dec
• CVE-2018-20198 MEDIUM 5.5 DOWNGRADE A NULL pointer dereference was discovered in ifilter_bank of libfaad/filtbank.c in Freeware Advanced Audio Dec
• CVE-2018-20197 HIGH 7.8 DOWNGRADE There is a stack-based buffer underflow in the third instance of the calculate_gain function in libfaad/sbr_hf
• CVE-2018-20196 HIGH 7.8 DOWNGRADE MITIGATE There is a stack-based buffer overflow in the third instance of the calculate_gain function in libfaad/sbr_hfa
• CVE-2018-20195 MEDIUM 5.5 DOWNGRADE A NULL pointer dereference was discovered in ic_predict of libfaad/ic_predict.c in Freeware Advanced Audio Dec
• CVE-2018-20194 HIGH 7.8 DOWNGRADE There is a stack-based buffer underflow in the third instance of the calculate_gain function in libfaad/sbr_hf
• CVE-2018-19891 MEDIUM 5.5 DOWNGRADE An invalid memory address dereference was discovered in the huffcode function (libfaac/huff2.c) in Freeware Ad
• CVE-2018-19890 MEDIUM 5.5 DOWNGRADE An invalid memory address dereference was discovered in the huffcode function (libfaac/huff2.c) in Freeware Ad
• CVE-2018-19889 MEDIUM 5.5 DOWNGRADE An invalid memory address dereference was discovered in the huffcode function (libfaac/huff2.c) in Freeware Ad
• CVE-2018-19888 MEDIUM 5.5 DOWNGRADE An invalid memory address dereference was discovered in the huffcode function (libfaac/huff2.c) in Freeware Ad
• CVE-2018-19887 MEDIUM 5.5 DOWNGRADE An invalid memory address dereference was discovered in the huffcode function (libfaac/huff2.c) in Freeware Ad
• CVE-2018-19886 MEDIUM 5.5 DOWNGRADE An invalid memory address dereference was discovered in the huffcode function (libfaac/huff2.c) in Freeware Ad
• CVE-2018-19504 HIGH 7.8 DOWNGRADE An issue was discovered in Freeware Advanced Audio Decoder 2 (FAAD2) 2.8.1
• CVE-2018-19503 HIGH 7.8 DOWNGRADE An issue was discovered in Freeware Advanced Audio Decoder 2 (FAAD2) 2.8.1
• CVE-2018-19502 HIGH 7.8 DOWNGRADE An issue was discovered in Freeware Advanced Audio Decoder 2 (FAAD2) 2.8.1

FAQ

How do I fix audiocoding vulnerabilities?

Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.

Is audiocoding being exploited right now?

None of the tracked audiocoding CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.

Which audiocoding CVE should I patch first?

CVE-2018-20196 currently ranks highest (55/100): There is a stack-based buffer overflow in the third instance of the calculate_gain function in libfaad/sbr_hfa.

Products

• freeware advanced audio coder
• freeware advanced audio decoder 2

RSS feed for audiocoding · ← Back to latest CVEs