Audiocoding Freeware Advanced Audio Decoder 2 — known CVE vulnerabilities

Every CVE whose affected-product data names Audiocoding Freeware Advanced Audio Decoder 2, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (28)

• CVE-2018-19502 — CVSS 7.8 (high): An issue was discovered in Freeware Advanced Audio Decoder 2 (FAAD2) 2.8.1. There was a heap-based buffer overflow in the function…
• CVE-2019-15296 — CVSS 7.8 (high): An issue was discovered in Freeware Advanced Audio Decoder 2 (FAAD2) 2.8.8. The faad_resetbits function in libfaad/bits.c is affected by a…
• CVE-2018-20197 — CVSS 7.8 (high): There is a stack-based buffer underflow in the third instance of the calculate_gain function in libfaad/sbr_hfadj.c in Freeware Advanced…
• CVE-2018-20196 — CVSS 7.8 (high): There is a stack-based buffer overflow in the third instance of the calculate_gain function in libfaad/sbr_hfadj.c in Freeware Advanced…
• CVE-2018-20194 — CVSS 7.8 (high): There is a stack-based buffer underflow in the third instance of the calculate_gain function in libfaad/sbr_hfadj.c in Freeware Advanced…
• CVE-2018-19504 — CVSS 7.8 (high): An issue was discovered in Freeware Advanced Audio Decoder 2 (FAAD2) 2.8.1. There is a NULL pointer dereference in ifilter_bank() in…
• CVE-2018-19503 — CVSS 7.8 (high): An issue was discovered in Freeware Advanced Audio Decoder 2 (FAAD2) 2.8.1. There was a stack-based buffer overflow in the function…
• CVE-2019-6956 — CVSS 7.1 (high): An issue was discovered in Freeware Advanced Audio Decoder 2 (FAAD2) 2.8.8. It is a buffer over-read in ps_mix_phase in libfaad/ps_dec.c.
• CVE-2017-9255 — CVSS 5.5 (medium): The mp4ff_read_stsc function in common/mp4ff/mp4atom.c in Freeware Advanced Audio Decoder 2 (FAAD2) 2.7 allows remote attackers to cause a…
• CVE-2017-9256 — CVSS 5.5 (medium): The mp4ff_read_stco function in common/mp4ff/mp4atom.c in Freeware Advanced Audio Decoder 2 (FAAD2) 2.7 allows remote attackers to cause a…
• CVE-2017-9257 — CVSS 5.5 (medium): The mp4ff_read_ctts function in common/mp4ff/mp4atom.c in Freeware Advanced Audio Decoder 2 (FAAD2) 2.7 allows remote attackers to cause a…
• CVE-2017-9254 — CVSS 5.5 (medium): The mp4ff_read_stts function in common/mp4ff/mp4atom.c in Freeware Advanced Audio Decoder 2 (FAAD2) 2.7 allows remote attackers to cause a…
• CVE-2017-9253 — CVSS 5.5 (medium): The mp4ff_read_stsd function in common/mp4ff/mp4atom.c in Freeware Advanced Audio Decoder 2 (FAAD2) 2.7 allows remote attackers to cause a…
• CVE-2017-9223 — CVSS 5.5 (medium): The mp4ff_read_stts function in common/mp4ff/mp4atom.c in Freeware Advanced Audio Decoder 2 (FAAD2) 2.7 allows remote attackers to cause a…
• CVE-2017-9222 — CVSS 5.5 (medium): The mp4ff_parse_tag function in common/mp4ff/mp4meta.c in Freeware Advanced Audio Decoder 2 (FAAD2) 2.7 allows remote attackers to cause a…
• CVE-2018-20195 — CVSS 5.5 (medium): A NULL pointer dereference was discovered in ic_predict of libfaad/ic_predict.c in Freeware Advanced Audio Decoder 2 (FAAD2) 2.8.8. The…
• CVE-2017-9221 — CVSS 5.5 (medium): The mp4ff_read_mdhd function in common/mp4ff/mp4atom.c in Freeware Advanced Audio Decoder 2 (FAAD2) 2.7 allows remote attackers to cause a…
• CVE-2017-9220 — CVSS 5.5 (medium): The mp4ff_read_stco function in common/mp4ff/mp4atom.c in Freeware Advanced Audio Decoder 2 (FAAD2) 2.7 allows remote attackers to cause a…
• CVE-2018-20198 — CVSS 5.5 (medium): A NULL pointer dereference was discovered in ifilter_bank of libfaad/filtbank.c in Freeware Advanced Audio Decoder 2 (FAAD2) 2.8.8. The…
• CVE-2018-20199 — CVSS 5.5 (medium): A NULL pointer dereference was discovered in ifilter_bank of libfaad/filtbank.c in Freeware Advanced Audio Decoder 2 (FAAD2) 2.8.8. The…
• CVE-2018-20357 — CVSS 5.5 (medium): A NULL pointer dereference was discovered in sbr_process_channel of libfaad/sbr_dec.c in Freeware Advanced Audio Decoder 2 (FAAD2) 2.8.8…
• CVE-2018-20358 — CVSS 5.5 (medium): An invalid memory address dereference was discovered in the lt_prediction function of libfaad/lt_predict.c in Freeware Advanced Audio…
• CVE-2018-20359 — CVSS 5.5 (medium): An invalid memory address dereference was discovered in the sbrDecodeSingleFramePS function of libfaad/sbr_dec.c in Freeware Advanced Audio…
• CVE-2018-20360 — CVSS 5.5 (medium): An invalid memory address dereference was discovered in the sbr_process_channel function of libfaad/sbr_dec.c in Freeware Advanced Audio…
• CVE-2018-20361 — CVSS 5.5 (medium): An invalid memory address dereference was discovered in the hf_assembly function of libfaad/sbr_hfadj.c in Freeware Advanced Audio Decoder…
• CVE-2018-20362 — CVSS 5.5 (medium): A NULL pointer dereference was discovered in ifilter_bank of libfaad/filtbank.c in Freeware Advanced Audio Decoder 2 (FAAD2) 2.8.8. The…
• CVE-2017-9219 — CVSS 5.5 (medium): The mp4ff_read_stsc function in common/mp4ff/mp4atom.c in Freeware Advanced Audio Decoder 2 (FAAD2) 2.7 allows remote attackers to cause a…
• CVE-2017-9218 — CVSS 5.5 (medium): The mp4ff_read_stsd function in common/mp4ff/mp4atom.c in Freeware Advanced Audio Decoder 2 (FAAD2) 2.7 allows remote attackers to cause a…