vulnerability

Ubuntu: (CVE-2018-20362): faad2 vulnerability

Try Surface Command

Back to search

Severity	CVSS	Published	Added	Modified
4	(AV:N/AC:M/Au:N/C:N/I:N/A:P)	Dec 22, 2018	Nov 19, 2024	Apr 16, 2026

Severity

CVSS

(AV:N/AC:M/Au:N/C:N/I:N/A:P)

Published

Dec 22, 2018

Added

Nov 19, 2024

Modified

Apr 16, 2026

Description

A NULL pointer dereference was discovered in ifilter_bank of libfaad/filtbank.c in Freeware Advanced Audio Decoder 2 (FAAD2) 2.8.8. The vulnerability causes a segmentation fault and application crash because adding to windowed output is mishandled in the EIGHT_SHORT_SEQUENCE case.

Solution

ubuntu-pro-upgrade-faad2

References

CVE-2018-20362
https://attackerkb.com/topics/CVE-2018-20362
CWE-476
DEBIAN-DSA-4522
EUVD-EUVD-2018-12920
https://euvd.enisa.europa.eu/vulnerability/EUVD-2018-12920
https://github.com/knik0/faad2/issues/26
https://www.cve.org/CVERecord?id=CVE-2018-20362

Rapid7 Labs

2026 Global Threat Landscape Report

The predictive window has collapsed. Exploitation follows disclosure in days. See how attackers are accelerating and how to stay ahead.

Get report