Описание
An issue was discovered in Freeware Advanced Audio Decoder 2 (FAAD2) 2.8.8. The faad_resetbits function in libfaad/bits.c is affected by a buffer overflow vulnerability. The number of bits to be read is determined by ld->buffer_size - words4, cast to uint32. If ld->buffer_size - words4 is negative, a buffer overflow is later performed via getdword_n(&ld->start[words], ld->bytes_left).
| Релиз | Статус | Примечание |
|---|---|---|
| bionic | ignored | end of standard support, was needed |
| devel | not-affected | 2.8.8-3ubuntu3 |
| disco | ignored | end of life |
| eoan | not-affected | 2.8.8-3ubuntu3 |
| esm-apps/bionic | needed | |
| esm-apps/focal | not-affected | 2.8.8-3ubuntu3 |
| esm-apps/jammy | not-affected | 2.8.8-3ubuntu3 |
| esm-apps/noble | not-affected | 2.8.8-3ubuntu3 |
| esm-apps/xenial | needed | |
| esm-infra-legacy/trusty | released | 2.7-8+deb8u3build0.14.04.1~esm1 |
Показывать по
EPSS
6.8 Medium
CVSS2
7.8 High
CVSS3
Связанные уязвимости
An issue was discovered in Freeware Advanced Audio Decoder 2 (FAAD2) 2.8.8. The faad_resetbits function in libfaad/bits.c is affected by a buffer overflow vulnerability. The number of bits to be read is determined by ld->buffer_size - words*4, cast to uint32. If ld->buffer_size - words*4 is negative, a buffer overflow is later performed via getdword_n(&ld->start[words], ld->bytes_left).
An issue was discovered in Freeware Advanced Audio Decoder 2 (FAAD2) 2 ...
An issue was discovered in Freeware Advanced Audio Decoder 2 (FAAD2) 2.8.8. The faad_resetbits function in libfaad/bits.c is affected by a buffer overflow vulnerability. The number of bits to be read is determined by ld->buffer_size - words*4, cast to uint32. If ld->buffer_size - words*4 is negative, a buffer overflow is later performed via getdword_n(&ld->start[words], ld->bytes_left).
Уязвимость функции faad_resetbits() набора программного обеспечения для работы с аудиофайлами Freeware Advanced Audio Decoder 2 (FAAD2), позволяющая нарушителю оказать воздействие на целостность данных, получить несанкционированный доступ к защищаемой информации, а также вызвать отказ в обслуживании
EPSS
6.8 Medium
CVSS2
7.8 High
CVSS3