Lucene search
Veracode Vulnerability DatabaseVERACODE:25364HistoryMay 10, 2020 - 11:28 p.m.
Arbitrary Code Execution
2020-05-1023:28:15
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
8
0.001 Low
EPSS
Percentile
46.1%
faad2 is vulnerable to arbitrary code execution. The vulnerability exists as an issue was discovered in Freeware Advanced Audio Decoder 2 (FAAD2) 2.8.8. It is a buffer over-read in ps_mix_phase in libfaad/ps_dec.c.
References
github.com/TeamSeri0us/pocs/blob/master/faad/global-buffer-overflow%40ps_mix_phase.md
lists.debian.org/debian-lts-announce/2019/08/msg00033.html
lists.debian.org/debian-lts-announce/2021/10/msg00020.html
security.gentoo.org/glsa/202006-17
sourceforge.net/p/faac/bugs/240/
www.debian.org/security/2022/dsa-5109
Related
osv
osv
CVE-2019-6956
2019-01-25 16:29:00
faad2 - security update
2019-08-28 00:00:00
faad2 - security update
2021-10-24 00:00:00
openvas
openvas
Mageia: Security Advisory (MGASA-2019-0215)
2022-01-28 00:00:00
Debian: Security Advisory (DLA-1899-1)
2019-08-29 00:00:00
Debian: Security Advisory (DLA-2792-1)
2021-10-25 00:00:00
cvelist
cvelist
CVE-2019-6956
2019-01-25 16:00:00
alpinelinux
alpinelinux
CVE-2019-6956
2019-01-25 16:29:00
prion
prion
Buffer overflow
2019-01-25 16:29:00
nvd
nvd
CVE-2019-6956
2019-01-25 16:29:00
debiancve
debiancve
CVE-2019-6956
2019-01-25 16:29:00
cve
cve
CVE-2019-6956
2019-01-25 16:29:00
ubuntucve
ubuntucve
CVE-2019-6956
2019-01-25 00:00:00
mageia
mageia
Updated vlc packages fix security vulnerability
2019-07-25 22:53:31
nessus
nessus
Debian DLA-1899-1 : faad2 security update
2019-08-29 00:00:00
Debian DLA-2792-1 : faad2 - LTS security update
2021-10-25 00:00:00
Debian DSA-5109-1 : faad2 - security update
2022-04-20 00:00:00
debian
debian
[SECURITY] [DLA 1899-1] faad2 security update
2019-08-28 19:30:56
[SECURITY] [DLA 2792-1] faad2 security update
2021-10-24 15:38:44
[SECURITY] [DSA 5109-1] faad2 security update
2022-03-27 20:28:11
gentoo
gentoo
FAAD2: Multiple vulnerabilities
2020-06-15 00:00:00