CVE-2018-20195

Name of the Vulnerable Software and Affected Versions Freeware Advanced Audio Decoder 2 (FAAD2) version 2.8.8

Description A NULL pointer dereference was discovered in the ic predict function of libfaad/ic predict.c, which can cause a segmentation fault and application crash, leading to denial of service. The issue is related to the exploitation of this NULL pointer dereference, allowing an attacker to cause a service disruption.

Recommendations For Freeware Advanced Audio Decoder 2 (FAAD2) version 2.8.8, as a temporary workaround, consider disabling the ic predict function until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.