Audiocoding maintains a small portfolio of widely embedded audio codec libraries, notably the Freeware Advanced Audio Decoder (FAAD2) and Advanced Audio Coder, that are incorporated into multimedia applications and devices across numerous platforms. Despite the modest product count, these libraries occupy a prominent position in the audio-processing supply chain: a single vulnerability can affect every downstream application that links the codec, multiplying the practical exposure. The recurring weakness classes—buffer-boundary violations, NULL-pointer dereferences, excessive iteration, and out-of-bounds memory access—reflect the parsing complexity and performance constraints inherent to real-time audio decoding. Defenders should prioritize inventory of products embedding these codecs and track vendor updates closely, since remediation typically requires downstream rebuilds; live severity, exploitation, and exposure counts are shown alongside this summary.
The number and severity of CVEs published that impact products developed by Audiocoding over time
Signals from CVEs in this vendor scope (36 CVEs).
36 CVEs · Highest risk first
| CVE | Published | CVSS | Risk | KEV | Exploit |
|---|---|---|---|---|---|
CVE-2017-9129MEDIUM The wav_open_read function in frontend/input.c in Freeware Advanced Audio Coder (FAAC) 1.28 allows remote attackers to cause a denial of service (large loop) via a crafted wav file | Jun 21, 2017 | 5.5 | 30 | NO | YES |
CVE-2019-15296HIGH An issue was discovered in Freeware Advanced Audio Decoder 2 (FAAD2) 2.8.8. The faad_resetbits function in libfaad/bits.c is affected by a buffer overflow vulnerability. The number | Aug 21, 2019 | 7.8 | 25 | NO | NO |
CVE-2018-20197HIGH There is a stack-based buffer underflow in the third instance of the calculate_gain function in libfaad/sbr_hfadj.c in Freeware Advanced Audio Decoder 2 (FAAD2) 2.8.8. A crafted in | Dec 18, 2018 | 7.8 | 25 | NO | NO |
CVE-2018-20196HIGH There is a stack-based buffer overflow in the third instance of the calculate_gain function in libfaad/sbr_hfadj.c in Freeware Advanced Audio Decoder 2 (FAAD2) 2.8.8. A crafted inp | Dec 18, 2018 | 7.8 | 25 | NO | NO |
CVE-2018-19504HIGH An issue was discovered in Freeware Advanced Audio Decoder 2 (FAAD2) 2.8.1. There is a NULL pointer dereference in ifilter_bank() in libfaad/filtbank.c. | Nov 23, 2018 | 7.8 | 25 | NO | NO |
CVE-2018-19503HIGH An issue was discovered in Freeware Advanced Audio Decoder 2 (FAAD2) 2.8.1. There was a stack-based buffer overflow in the function calculate_gain() in libfaad/sbr_hfadj.c. | Nov 23, 2018 | 7.8 | 25 | NO | NO |
CVE-2018-19502HIGH An issue was discovered in Freeware Advanced Audio Decoder 2 (FAAD2) 2.8.1. There was a heap-based buffer overflow in the function excluded_channels() in libfaad/syntax.c. | Nov 23, 2018 | 7.8 | 25 | NO | NO |
CVE-2008-4201HIGH Heap-based buffer overflow in the decodeMP4file function (frontend/main.c) in FAAD2 2.6.1 and earlier allows remote attackers to cause a denial of service (crash) and possibly exec | Sep 24, 2008 | 9.3 | 25 | NO | NO |
CVE-2019-6956HIGH An issue was discovered in Freeware Advanced Audio Decoder 2 (FAAD2) 2.8.8. It is a buffer over-read in ps_mix_phase in libfaad/ps_dec.c. | Jan 25, 2019 | 7.1 | 24 | NO | NO |
CVE-2018-20194HIGH There is a stack-based buffer underflow in the third instance of the calculate_gain function in libfaad/sbr_hfadj.c in Freeware Advanced Audio Decoder 2 (FAAD2) 2.8.8. A crafted in | Dec 18, 2018 | 7.8 | 24 | NO | NO |
Signals from CVEs in this vendor scope (36 CVEs).
An overview of all social media posts that mention a CVE ID that affects a product developed by Audiocoding.
Media articles that mention a CVE ID that affects a product developed by Audiocoding — matched by CVE ID, not by vendor name.