CVE-2018-20360

An invalid memory address dereference was discovered in the sbr_process_channel function of libfaad/sbr_dec.c in Freeware Advanced Audio Decoder 2 (FAAD2) 2.8.8. The vulnerability causes a segmentation fault and application crash, which leads to denial of service.

• CWE-119

• https://github.com/knik0/faad2/issues/32Exploit, Third Party Advisory
• https://lists.debian.org/debian-lts-announce/2019/08/msg00033.htmlMailing List, Third Party Advisory
• https://lists.debian.org/debian-lts-announce/2021/10/msg00020.htmlMailing List, Third Party Advisory
• https://security.gentoo.org/glsa/202006-17Third Party Advisory
• https://www.debian.org/security/2022/dsa-5109Third Party Advisory
• https://github.com/knik0/faad2/issues/32Exploit, Third Party Advisory
• https://lists.debian.org/debian-lts-announce/2019/08/msg00033.htmlMailing List, Third Party Advisory
• https://lists.debian.org/debian-lts-announce/2021/10/msg00020.htmlMailing List, Third Party Advisory
• https://security.gentoo.org/glsa/202006-17Third Party Advisory
• https://www.debian.org/security/2022/dsa-5109Third Party Advisory

Published

Dec 22, 2018

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2018-20355An invalid write of 8 bytes due to a use-after-free vulnerab…
• CVE-2018-20356An invalid read of 8 bytes due to a use-after-free vulnerabi…
• CVE-2018-20357A NULL pointer dereference was discovered in sbr_process_cha…
• CVE-2018-20358An invalid memory address dereference was discovered in the …
• CVE-2018-20359An invalid memory address dereference was discovered in the …
• CVE-2018-2036Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultI…
• CVE-2018-20361An invalid memory address dereference was discovered in the …
• CVE-2018-20362A NULL pointer dereference was discovered in ifilter_bank of…
• CVE-2018-20363LibRaw::raw2image in libraw_cxx.cpp in LibRaw 0.19.1 has a N…
• CVE-2018-20364LibRaw::copy_bayer in libraw_cxx.cpp in LibRaw 0.19.1 has a …
• CVE-2018-20365LibRaw::raw2image() in libraw_cxx.cpp has a heap-based buffe…
• CVE-2018-20367The "mall some commodity details: commodity consultation" co…