CVE-2018-20360

An invalid memory address dereference was discovered in the sbr_process_channel function of libfaad/sbr_dec.c in Freeware Advanced Audio Decoder 2 (FAAD2)…

published December 22, 2018

CVSS
—
EPSS
1%
Percentile
65.9
In the wild
Unconfirmed
What it is

An invalid memory address dereference was discovered in the sbr_process_channel function of libfaad/sbr_dec.c in Freeware Advanced Audio Decoder 2 (FAAD2) 2.8.8. The vulnerability causes a segmentation fault and application crash, which leads to denial of service.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01128 · 65.9th percentile
Published
2018-12-22T15:00Z
EPSS history
Timeline
  • 22 DEC 15:00Z
    An invalid memory address dereference was discovered in the sbr_process_channel function of libfaad/sbr_dec.c in Freeware Advanced Audio Decoder 2 (FAAD2)…
    cvelistv5