CVE-2018-19888: Audiocoding Freeware Advanced Audio Coder

Medium severity, CVSS 5.5. EPSS: 0.9% chance of exploitation in the next 30 days.

An invalid memory address dereference was discovered in the huffcode function (libfaac/huff2.c) in Freeware Advanced Audio Coder (FAAC) 1.29.9.2. The vulnerability causes a segmentation fault and application crash, which leads to denial of service in the HCB_ESC case.

Affected products

• Audiocoding Freeware Advanced Audio Coder: version 1.29.9.2 only

Published 2018-12-06. Last modified 2026-06-17.