Priority MEDIUM 50
Heap-based buffer overflow in the decodeMP4file function (frontend/main.c) in FAAD2 2.6.1 and earlier allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted MPEG-4…
CVSS 2.0HIGH 9.3· Network · No auth · Interaction — · EPSS 0.06652 · Published 2008-09-24 · No fix listed CWE-119
Priority LOW 37
An issue was discovered in Freeware Advanced Audio Decoder 2 (FAAD2) 2.8.8.
CVSS 3.0HIGH 7.8· Local · No auth · User interaction · EPSS 0.01316 · Published 2019-08-21 · No fix listed CWE-119
Priority LOW 37
There is a stack-based buffer underflow in the third instance of the calculate_gain function in libfaad/sbr_hfadj.c in Freeware Advanced Audio Decoder 2 (FAAD2) 2.8.8.
CVSS 3.0HIGH 7.8· Local · No auth · User interaction · EPSS 0.01317 · Published 2018-12-18 · No fix listed CWE-787
Priority LOW 37
There is a stack-based buffer overflow in the third instance of the calculate_gain function in libfaad/sbr_hfadj.c in Freeware Advanced Audio Decoder 2 (FAAD2) 2.8.8.
CVSS 3.1HIGH 7.8· Local · No auth · User interaction · EPSS 0.01281 · Published 2018-12-18 · No fix listed CWE-787
Priority LOW 37
There is a stack-based buffer underflow in the third instance of the calculate_gain function in libfaad/sbr_hfadj.c in Freeware Advanced Audio Decoder 2 (FAAD2) 2.8.8.
CVSS 3.0HIGH 7.8· Local · No auth · User interaction · EPSS 0.01324 · Published 2018-12-18 · No fix listed CWE-787
Priority LOW 37
An issue was discovered in Freeware Advanced Audio Decoder 2 (FAAD2) 2.8.1.
CVSS 3.0HIGH 7.8· Local · No auth · User interaction · EPSS 0.01383 · Published 2018-11-23 · No fix listed CWE-125
Priority LOW 37
An issue was discovered in Freeware Advanced Audio Decoder 2 (FAAD2) 2.8.1.
CVSS 3.0HIGH 7.8· Local · No auth · User interaction · EPSS 0.0145 · Published 2018-11-23 · No fix listed CWE-787
Priority LOW 37
An issue was discovered in Freeware Advanced Audio Decoder 2 (FAAD2) 2.8.1.
CVSS 3.0HIGH 7.8· Local · No auth · User interaction · EPSS 0.0166 · Published 2018-11-23 · No fix listed CWE-787
Priority LOW 34
An issue was discovered in Freeware Advanced Audio Decoder 2 (FAAD2) 2.8.8.
CVSS 3.1HIGH 7.1· Local · No auth · User interaction · EPSS 0.01153 · Published 2019-01-25 · No fix listed CWE-125
Priority LOW 30
The wav_open_read function in frontend/input.c in Freeware Advanced Audio Coder (FAAC) 1.28 allows remote attackers to cause a denial of service (large loop) via a crafted wav file.
CVSS 3.0MEDIUM 5.5· Local · No auth · User interaction · EPSS 0.02508 · Published 2017-06-21 · No fix listed CWE-400
Priority LOW 27
A NULL pointer dereference was discovered in ifilter_bank of libfaad/filtbank.c in Freeware Advanced Audio Decoder 2 (FAAD2) 2.8.8.
CVSS 3.0MEDIUM 5.5· Local · No auth · User interaction · EPSS 0.01165 · Published 2018-12-22 · No fix listed CWE-476
Priority LOW 27
An invalid memory address dereference was discovered in the hf_assembly function of libfaad/sbr_hfadj.c in Freeware Advanced Audio Decoder 2 (FAAD2) 2.8.8.
CVSS 3.0MEDIUM 5.5· Local · No auth · User interaction · EPSS 0.01207 · Published 2018-12-22 · No fix listed CWE-119
Priority LOW 27
An invalid memory address dereference was discovered in the sbr_process_channel function of libfaad/sbr_dec.c in Freeware Advanced Audio Decoder 2 (FAAD2) 2.8.8.
CVSS 3.1MEDIUM 5.5· Local · No auth · User interaction · EPSS 0.01128 · Published 2018-12-22 · No fix listed CWE-119
Priority LOW 27
An invalid memory address dereference was discovered in the sbrDecodeSingleFramePS function of libfaad/sbr_dec.c in Freeware Advanced Audio Decoder 2 (FAAD2) 2.8.8.
CVSS 3.0MEDIUM 5.5· Local · No auth · User interaction · EPSS 0.01165 · Published 2018-12-22 · No fix listed CWE-119
Priority LOW 27
An invalid memory address dereference was discovered in the lt_prediction function of libfaad/lt_predict.c in Freeware Advanced Audio Decoder 2 (FAAD2) 2.8.8.
CVSS 3.0MEDIUM 5.5· Local · No auth · User interaction · EPSS 0.01149 · Published 2018-12-22 · No fix listed CWE-119
Priority LOW 27
A NULL pointer dereference was discovered in sbr_process_channel of libfaad/sbr_dec.c in Freeware Advanced Audio Decoder 2 (FAAD2) 2.8.8.
CVSS 3.0MEDIUM 5.5· Local · No auth · User interaction · EPSS 0.01165 · Published 2018-12-22 · No fix listed CWE-476
Priority LOW 27
A NULL pointer dereference was discovered in ifilter_bank of libfaad/filtbank.c in Freeware Advanced Audio Decoder 2 (FAAD2) 2.8.8.
CVSS 3.1MEDIUM 5.5· Local · No auth · User interaction · EPSS 0.01128 · Published 2018-12-18 · No fix listed CWE-476
Priority LOW 27
A NULL pointer dereference was discovered in ifilter_bank of libfaad/filtbank.c in Freeware Advanced Audio Decoder 2 (FAAD2) 2.8.8.
CVSS 3.0MEDIUM 5.5· Local · No auth · User interaction · EPSS 0.01207 · Published 2018-12-18 · No fix listed CWE-476
Priority LOW 27
A NULL pointer dereference was discovered in ic_predict of libfaad/ic_predict.c in Freeware Advanced Audio Decoder 2 (FAAD2) 2.8.8.
CVSS 3.0MEDIUM 5.5· Local · No auth · User interaction · EPSS 0.01165 · Published 2018-12-18 · No fix listed CWE-476
Priority LOW 27
An invalid memory address dereference was discovered in the huffcode function (libfaac/huff2.c) in Freeware Advanced Audio Coder (FAAC) 1.29.9.2.
CVSS 3.0MEDIUM 5.5· Local · No auth · User interaction · EPSS 0.00954 · Published 2018-12-06 · No fix listed CWE-119
Priority LOW 27
An invalid memory address dereference was discovered in the huffcode function (libfaac/huff2.c) in Freeware Advanced Audio Coder (FAAC) 1.29.9.2.
CVSS 3.1MEDIUM 5.5· Local · No auth · User interaction · EPSS 0.00996 · Published 2018-12-06 · No fix listed CWE-119
Priority LOW 27
The mp4ff_read_ctts function in common/mp4ff/mp4atom.c in Freeware Advanced Audio Decoder 2 (FAAD2) 2.7 allows remote attackers to cause a denial of service (large loop and CPU consumption) via a crafted mp4 file.
CVSS 3.0MEDIUM 5.5· Local · No auth · User interaction · EPSS 0.0096 · Published 2017-06-27 · No fix listed CWE-834
Priority LOW 27
The mp4ff_read_stco function in common/mp4ff/mp4atom.c in Freeware Advanced Audio Decoder 2 (FAAD2) 2.7 allows remote attackers to cause a denial of service (large loop and CPU consumption) via a crafted mp4 file.
CVSS 3.0MEDIUM 5.5· Local · No auth · User interaction · EPSS 0.0096 · Published 2017-06-27 · No fix listed CWE-834
Priority LOW 27
The mp4ff_read_stsc function in common/mp4ff/mp4atom.c in Freeware Advanced Audio Decoder 2 (FAAD2) 2.7 allows remote attackers to cause a denial of service (large loop and CPU consumption) via a crafted mp4 file.
CVSS 3.0MEDIUM 5.5· Local · No auth · User interaction · EPSS 0.0096 · Published 2017-06-27 · No fix listed CWE-834
Priority LOW 27
The mp4ff_read_stts function in common/mp4ff/mp4atom.c in Freeware Advanced Audio Decoder 2 (FAAD2) 2.7 allows remote attackers to cause a denial of service (large loop and CPU consumption) via a crafted mp4 file.
CVSS 3.0MEDIUM 5.5· Local · No auth · User interaction · EPSS 0.0096 · Published 2017-06-27 · No fix listed CWE-834
Load more