An issue was discovered in Freeware Advanced Audio Decoder 2 (FAAD2) 2.8.8. The faad_resetbits function in libfaad/bits.c is affected by a buffer overflow vulnerability. The number of bits to be read is determined by ld->buffer_size - words*4, cast to uint32. If ld->buffer_size - words*4 is negative, a buffer overflow is later performed via getdword_n(&ld->start[words], ld->bytes_left).
History

No history.

cve-icon MITRE

Status: PUBLISHED

Assigner: mitre

Published: 2019-08-21T06:07:57

Updated: 2024-08-05T00:42:03.734Z

Reserved: 2019-08-21T00:00:00

Link: CVE-2019-15296

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Modified

Published: 2019-08-21T07:15:10.830

Modified: 2024-11-21T04:28:24.140

Link: CVE-2019-15296

cve-icon Redhat

No data.