CVE-2019-6956
Summary
| CVE | CVE-2019-6956 |
| State | PUBLIC |
| Assigner | [email protected] |
| Source Priority | CVE Program / NVD first with legacy fallback |
| Published | 2019-01-25 16:29:00 UTC |
| Updated | 2022-04-22 20:40:00 UTC |
| Description | An issue was discovered in Freeware Advanced Audio Decoder 2 (FAAD2) 2.8.8. It is a buffer over-read in ps_mix_phase in libfaad/ps_dec.c. |
NVD Known Affected Configurations (CPE 2.3)
References
| Reference | Source | Link | Tags |
|---|
| Freeware Advanced Audio Codec / Bugs/Patches/etc. / #240 Serveral bugs in faad2 |
MISC |
sourceforge.net |
Issue Tracking, Third Party Advisory |
| Debian -- Security Information -- DSA-5109-1 faad2 |
DEBIAN |
www.debian.org |
|
| [SECURITY] [DLA 1899-1] faad2 security update |
MLIST |
lists.debian.org |
|
| FAAD2: Multiple vulnerabilities (GLSA 202006-17) — Gentoo security |
GENTOO |
security.gentoo.org |
|
| pocs/global-buffer-overflow@ps_mix_phase.md at master · TeamSeri0us/pocs · GitHub |
MISC |
github.com |
Exploit, Patch, Third Party Advisory |
| [SECURITY] [DLA 2792-1] faad2 security update |
MLIST |
lists.debian.org |
|
| CVE Program record |
CVE.ORG |
www.cve.org |
canonical |
| NVD vulnerability detail |
NVD |
nvd.nist.gov |
canonical, analysis |
No vendor comments have been submitted for this CVE.
Legacy QID Mappings
- 178843 Debian Security Update for faad2 (DLA 2792-1)
- 179159 Debian Security Update for faad2 (DSA 5109-1)
- 500896 Alpine Linux Security Update for faad2
- 504736 Alpine Linux Security Update for faad2