Unrated

A NULL pointer dereference was discovered in sbr_process_channel of libfaad/sbr_dec.c in Freeware Advanced Audio Decoder 2 (FAAD2) 2.8.8. The vulnerab...

CVE-2018-20357 First seen on SecPulse Dec 23, 2018

Fix status by distribution

Fixed packages published by each distribution for this CVE

Debian DEBIAN-CVE-2018-20357 faad2 Fixed in: 2.8.8-2

Original description The description as published by the source.

A NULL pointer dereference was discovered in sbr_process_channel of libfaad/sbr_dec.c in Freeware Advanced Audio Decoder 2 (FAAD2) 2.8.8. The vulnerability causes a segmentation fault and application crash.

Source: OSV.dev (Open Source Vulnerabilities) NVD OSV

References

advisory security.gentoo.org
advisory debian.org
report github.com
web seclists.org

Key facts

Severity: Unrated
Published: Dec 23, 2018
First seen on SecPulse: Dec 23, 2018

NVD OSV

Detection sources

OSV.dev (Open Source Vulnerabilities)Oct 20, 19:48