An invalid memory address dereference was discovered in the sbr_process_channel function of libfaad/sbr_dec.c in Freeware Advanced Audio Decoder 2 (FAAD2) 2.8.8. The vulnerability causes a segmentation fault and application crash, which leads to denial of service.
| Product | Vendor | Version |
|---|---|---|
| n/a | n/a | All versions prior to and including 14.2, 13.4, and 11.9, and all versions prior to the November 2022 release |