CVE-2018-20361

An invalid memory address dereference was discovered in the hf_assembly function of libfaad/sbr_hfadj.c in Freeware Advanced Audio Decoder 2 (FAAD2) 2.8.8

published December 22, 2018

CVSS
—
EPSS
1%
Percentile
68.1
In the wild
Unconfirmed
What it is

An invalid memory address dereference was discovered in the hf_assembly function of libfaad/sbr_hfadj.c in Freeware Advanced Audio Decoder 2 (FAAD2) 2.8.8. The vulnerability causes a segmentation fault and application crash, which leads to denial of service.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01207 · 68.1th percentile
Published
2018-12-22T15:00Z
EPSS history
Timeline
  • 22 DEC 15:00Z
    An invalid memory address dereference was discovered in the hf_assembly function of libfaad/sbr_hfadj.c in Freeware Advanced Audio Decoder 2 (FAAD2) 2.8.8
    cvelistv5