
CVE-2018-20194 – Debian Security Advisory 4522-1
https://notcve.org/view.php?id=CVE-2018-20194
18 Dec 2018 — There is a stack-based buffer underflow in the third instance of the calculate_gain function in libfaad/sbr_hfadj.c in Freeware Advanced Audio Decoder 2 (FAAD2) 2.8.8. A crafted input will lead to a denial of service or possibly unspecified other impact because limiting the additional noise energy level is mishandled for the G_max <= G case. Hay un subdesbordamiento de búfer basado en pila en la tercera instancia de la función calculate_gain en libfaad/sbr_hfadj.c en Freeware Advanced Audio Decoder 2 (FAAD2... • https://github.com/knik0/faad2/issues/21 • CWE-787: Out-of-bounds Write •

CVE-2018-20198 – Debian Security Advisory 4522-1
https://notcve.org/view.php?id=CVE-2018-20198
18 Dec 2018 — A NULL pointer dereference was discovered in ifilter_bank of libfaad/filtbank.c in Freeware Advanced Audio Decoder 2 (FAAD2) 2.8.8. The vulnerability causes a segmentation fault and application crash, which leads to denial of service because adding to windowed output is mishandled in the LONG_START_SEQUENCE case. Se ha descubierto una desreferencia de puntero NULL en ifilter_bank de libfaad/filtbank.c en Freeware Advanced Audio Decoder 2 (FAAD2) 2.8.8. Esta vulnerabilidad causa un error de segmentación y el... • https://github.com/knik0/faad2/issues/23 • CWE-476: NULL Pointer Dereference •

CVE-2018-20196 – Debian Security Advisory 5109-1
https://notcve.org/view.php?id=CVE-2018-20196
18 Dec 2018 — There is a stack-based buffer overflow in the third instance of the calculate_gain function in libfaad/sbr_hfadj.c in Freeware Advanced Audio Decoder 2 (FAAD2) 2.8.8. A crafted input will lead to a denial of service or possibly unspecified other impact because the S_M array is mishandled. Hay un desbordamiento de búfer basado en pila en la tercera instancia de la función calculate_gain en libfaad/sbr_hfadj.c en Freeware Advanced Audio Decoder 2 (FAAD2) 2.8.8. Se podría realizar un ataque de denegación de se... • https://github.com/knik0/faad2/issues/19 • CWE-787: Out-of-bounds Write •

CVE-2018-20195 – Debian Security Advisory 4522-1
https://notcve.org/view.php?id=CVE-2018-20195
18 Dec 2018 — A NULL pointer dereference was discovered in ic_predict of libfaad/ic_predict.c in Freeware Advanced Audio Decoder 2 (FAAD2) 2.8.8. The vulnerability causes a segmentation fault and application crash, which leads to denial of service. Se ha descubierto una desreferencia de puntero NULL en ic_predict de libfaad/ic_predict.c en Freeware Advanced Audio Decoder 2 (FAAD2) 2.8.8. Esta vulnerabilidad causa un error de segmentación y el cierre inesperado de la aplicación, lo que da lugar a una denegación de servici... • https://github.com/knik0/faad2/issues/25 • CWE-476: NULL Pointer Dereference •