Medium severity5.5OSV Advisory· Published Dec 22, 2018· Updated Jun 17, 2026

CVE-2018-20362

Description

A NULL pointer dereference was discovered in ifilter_bank of libfaad/filtbank.c in Freeware Advanced Audio Decoder 2 (FAAD2) 2.8.8. The vulnerability causes a segmentation fault and application crash because adding to windowed output is mishandled in the EIGHT_SHORT_SEQUENCE case.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Audiocoding/Faad2OSV
Range: 2_8_0, 2_8_1, 2_8_2, …
Audiocoding/Freeware Advanced Audio Decoder 2
cpe:2.3:a:audiocoding:freeware_advanced_audio_decoder_2:2.8.8:*:*:*:*:*:*:*
Freeware Advanced Audio Decoder/FAAD2llm-fuzzy
Range: =2.8.8
osv-coords
pkg:rpm/opensuse/faad2&distro=openSUSE%20Tumbleweed
Range: < 2.11.2-2.1

Patches

Vulnerability mechanics

References

github.com/knik0/faad2/issues/26nvdExploitThird Party Advisory
lists.debian.org/debian-lts-announce/2019/05/msg00022.htmlnvd
seclists.org/bugtraq/2019/Sep/28nvd
security.gentoo.org/glsa/202006-17nvd
www.debian.org/security/2019/dsa-4522nvd

News mentions

No linked articles in our index yet.

cvss	0.358
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000