NULL pointer dereference in Freeware Advanced Audio Decoder - CVE-2018-20199
Published: December 20, 2018
Vulnerability identifier: #VU16635
CSH Severity: Low
CVSS v4: 4.8 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N]
CVE-ID: CVE-2018-20199
CWE-ID: CWE-476
Exploitation vector: Local access
Exploit availability:
No public exploit available
Vulnerability details
The vulnerability allows a local attacker to cause DoS condition on the target system.
The vulnerability exists due to a NULL pointer dereference in ifilter_bank of libfaad/filtbank.c. A local attacker can trigger a segmentation fault that causes the affected software to crash, resulting in a DoS condition because adding to windowed output is mishandled in the ONLY_LONG_SEQUENCE case.
Affected software
Freeware Advanced Audio Decoder
Gentoo Linux
Debian Linux
faad2 (Alpine package)
faad2 (Debian package)
Gentoo Linux
Debian Linux
faad2 (Alpine package)
faad2 (Debian package)
How to mitigate CVE-2018-20199
Cybersecurity Help is currently unaware of any official solution to address the vulnerability.
faad2 (Alpine package) - update to 2.9.0-r0
faad2 (Debian package) - update to 2.10.0-1~deb10u1
faad2 (Debian package) - update to 2.10.0-1~deb10u1