1. Home
  2. CVE Database
  3. CVE-2018-19890
MEDIUM · 5.5

CVE-2018-19890

An invalid memory address dereference was discovered in the huffcode function (libfaac/huff2.c) in Freeware Advanced Audio Coder (FAAC) 1.29.9.2. The vulnerability causes a segmentation fault and appl...

Vulnerability Description

An invalid memory address dereference was discovered in the huffcode function (libfaac/huff2.c) in Freeware Advanced Audio Coder (FAAC) 1.29.9.2. The vulnerability causes a segmentation fault and application crash, which leads to denial of service in the book 2 case.

CVSS Score

5.5

MEDIUM

CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality
NONE
Integrity
NONE
Availability
HIGH

Affected Products

VendorProductVersions
AudiocodingFreeware Advanced Audio Coder1.29.9.2

Related Weaknesses (CWE)

CWE-119

References

FAQ

What is CVE-2018-19890?

CVE-2018-19890 is a vulnerability with a CVSS score of 5.5 (MEDIUM). An invalid memory address dereference was discovered in the huffcode function (libfaac/huff2.c) in Freeware Advanced Audio Coder (FAAC) 1.29.9.2. The vulnerability causes a segmentation fault and appl...

How severe is CVE-2018-19890?

CVE-2018-19890 has been rated MEDIUM with a CVSS base score of 5.5/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2018-19890?

Check the references section above for vendor advisories and patch information. Affected products include: Audiocoding Freeware Advanced Audio Coder.