CVE-2018-19887: Audiocoding Freeware Advanced Audio Coder

Medium severity, CVSS 5.5. EPSS: 1% chance of exploitation in the next 30 days.

An invalid memory address dereference was discovered in the huffcode function (libfaac/huff2.c) in Freeware Advanced Audio Coder (FAAC) 1.29.9.2. The vulnerability causes a segmentation fault and application crash, which leads to denial of service in the book 4 case.

Affected products

• Audiocoding Freeware Advanced Audio Coder: version 1.29.9.2 only

Published 2018-12-06. Last modified 2026-06-17.