PT-2018-3073 · Freeware+1 · Faad2+1
Fantasy7082
·
Publicado
2018-11-23
·
Atualizado
2025-07-03
·
CVE-2018-20358
CVSS v3.1
5.5
Média
| Vetor | AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H |
Name of the Vulnerable Software and Affected Versions
Freeware Advanced Audio Decoder 2 (FAAD2) version 2.8.8
Description
The issue is related to an invalid memory address dereference in the
lt prediction function, which can cause a segmentation fault and application crash, leading to denial of service. This is due to a buffer overflow error, allowing an attacker to potentially cause a denial of service.Recommendations
For Freeware Advanced Audio Decoder 2 (FAAD2) version 2.8.8, consider disabling the
lt prediction function as a temporary workaround until a patch is available. Restrict access to the affected lt predict.c module to minimize the risk of exploitation.Exploit
Correção
DoS
Buffer Overflow
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Alt Linux
Faad2