CVE-2018-19886

Name of the Vulnerable Software and Affected Versions FAAC version 1.29.9.2

Description A memory address dereference issue was found in the huffcode function, located in libfaac/huff2.c, which can cause a segmentation fault and application crash. This results in a denial of service, specifically in the book 8 case.

Recommendations For FAAC version 1.29.9.2, consider restricting access to the huffcode function in libfaac/huff2.c to minimize the risk of exploitation until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.