CVE-2018-20357

A NULL pointer dereference was discovered in sbr_process_channel of libfaad/sbr_dec.c in Freeware Advanced Audio Decoder 2 (FAAD2) 2.8.8

published December 22, 2018

CVSS
—
EPSS
1%
Percentile
67.0
In the wild
Unconfirmed
What it is

A NULL pointer dereference was discovered in sbr_process_channel of libfaad/sbr_dec.c in Freeware Advanced Audio Decoder 2 (FAAD2) 2.8.8. The vulnerability causes a segmentation fault and application crash.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01165 · 67.0th percentile
Published
2018-12-22T15:00Z
EPSS history
Timeline
  • 22 DEC 15:00Z
    A NULL pointer dereference was discovered in sbr_process_channel of libfaad/sbr_dec.c in Freeware Advanced Audio Decoder 2 (FAAD2) 2.8.8
    cvelistv5