Security Advisory

CVE-2018-20199

5.5
MEDIUM

Vulnerability Description

A NULL pointer dereference was discovered in ifilter_bank of libfaad/filtbank.c in Freeware Advanced Audio Decoder 2 (FAAD2) 2.8.8. The vulnerability causes a segmentation fault and application crash, which leads to denial of service because adding to windowed output is mishandled in the ONLY_LONG_SEQUENCE case.
Published Date December 18, 2018
Official Source NIST NVD Advisory