Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:25228
HistoryMay 10, 2020 - 11:21 p.m.

Denial Of Service (DoS)

2020-05-1023:21:10
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
8

0.001 Low

EPSS

Percentile

41.7%

faad2 is vulnerable to denial of service. A NULL pointer dereference in the ifilter_bank function of libfaad/filtbank.c allows an attacker to crash the application due to improper handling of the ONLY_LONG_SEQUENCE case when adding to windowed output which leads to a segmentation fault.

CPENameOperatorVersion
faad2eq2.7-r7
faad2eq2.7-r7