CVE-2018-19886

An invalid memory address dereference was discovered in the huffcode function (libfaac/huff2.c) in Freeware Advanced Audio Coder (FAAC) 1.29.9.2. The vulnerability causes a segmentation fault and application crash, which leads to denial of service in the book 8 case.
References
Link Resource
https://github.com/knik0/faac/issues/23 Exploit Third Party Advisory
https://security.gentoo.org/glsa/202208-16 Third Party Advisory
Configurations

Configuration 1 (hide)

cpe:2.3:a:audiocoding:freeware_advanced_audio_coder:1.29.9.2:*:*:*:*:*:*:*

History

11 Aug 2022, 01:15

Type Values Removed Values Added
References
  • (GENTOO) https://security.gentoo.org/glsa/202208-16 -

Information

Published : 2018-12-06 00:29

Updated : 2024-02-04 20:03


NVD link : CVE-2018-19886

Mitre link : CVE-2018-19886

CVE.ORG link : CVE-2018-19886


JSON object : View

Products Affected

audiocoding

  • freeware_advanced_audio_coder
CWE
CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer