CVE-2019-15296

An issue was discovered in Freeware Advanced Audio Decoder 2 (FAAD2) 2.8.8. The faad_resetbits function in libfaad/bits.c is affected by a buffer overflow vulnerability. The number of bits to be read is determined by ld->buffer_size - words*4, cast to uint32. If ld->buffer_size - words*4 is negative, a buffer overflow is later performed via getdword_n(&ld->start[words], ld->bytes_left).

• CWE-119

• https://github.com/knik0/faad2/commit/942c3e0aee748ea6fe97cb2c1aa5893225316174Patch, Third Party Advisory
• https://lists.debian.org/debian-lts-announce/2019/08/msg00033.htmlThird Party Advisory
• https://seclists.org/bugtraq/2019/Sep/28
• https://security.gentoo.org/glsa/202006-17
• https://www.debian.org/security/2019/dsa-4522
• https://github.com/knik0/faad2/commit/942c3e0aee748ea6fe97cb2c1aa5893225316174Patch, Third Party Advisory
• https://lists.debian.org/debian-lts-announce/2019/08/msg00033.htmlThird Party Advisory
• https://seclists.org/bugtraq/2019/Sep/28
• https://security.gentoo.org/glsa/202006-17
• https://www.debian.org/security/2019/dsa-4522

Published

Aug 21, 2019

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2019-15290Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2019-15291An issue was discovered in the Linux kernel through 5.2.9. T…
• CVE-2019-15292An issue was discovered in the Linux kernel before 5.0.9. Th…4.7
• CVE-2019-15293An issue was discovered in ACDSee Photo Studio Standard 22.1…
• CVE-2019-15294An issue was discovered in Gallagher Command Centre 8.10 bef…
• CVE-2019-15295An Untrusted Search Path vulnerability in the ServiceInstanc…
• CVE-2019-15297res_pjsip_t38 in Sangoma Asterisk 15.x before 15.7.4 and 16.…6.5
• CVE-2019-15298A problem was found in Centreon Web through 19.04.3. An auth…8.8
• CVE-2019-15299An issue was discovered in Centreon Web through 19.04.3. Whe…8.8
• CVE-2019-1530Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2019-15300A problem was found in Centreon Web through 19.04.3. An auth…8.8
• CVE-2019-15301A SQL injection vulnerability in the method Terrasoft.Core.D…9.8