CVE-2018-20358

An invalid memory address dereference was discovered in the lt_prediction function of libfaad/lt_predict.c in Freeware Advanced Audio Decoder 2 (FAAD2) 2.8.8

published December 22, 2018

CVSS
—
EPSS
1%
Percentile
66.6
In the wild
Unconfirmed
What it is

An invalid memory address dereference was discovered in the lt_prediction function of libfaad/lt_predict.c in Freeware Advanced Audio Decoder 2 (FAAD2) 2.8.8. The vulnerability causes a segmentation fault and application crash, which leads to denial of service.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01149 · 66.6th percentile
Published
2018-12-22T15:00Z
EPSS history
Timeline
  • 22 DEC 15:00Z
    An invalid memory address dereference was discovered in the lt_prediction function of libfaad/lt_predict.c in Freeware Advanced Audio Decoder 2 (FAAD2) 2.8.8
    cvelistv5