High
Security advisory
An issue was discovered in Freeware Advanced Audio Decoder 2 (FAAD2) 2.8.8. The faad_resetbits function in libfaad/bits.c is affected by a buffer overflow vulnerability. The number of bits to be read is determined by ld->buffer_size - words*4, cast to uint32. If ld->buffer_size - words*4 is negative, a buffer overflow is later performed via getdword_n(&ld->start[words], ld->bytes_left).
- Products
- Not specified
- Affected versions
- Not specified
- Fixed versions
- Not specified
- CVEs
- CVE-2019-15296
- Confirmed fixed CVEs
- Not specified
- Updated in this feed
- 31 Oct 2026, 12:29 UTC · Revision 1
Source evidence
An issue was discovered in Freeware Advanced Audio Decoder 2 (FAAD2) 2.8.8. The faad_resetbits function in libfaad/bits.c is affected by a buffer overflow vulnerability. The number of bits to be read is determined by ld->buffer_size - words*4, cast to uint32. If ld->buffer_size - words*4 is negative, a buffer overflow is later performed via getdword_n(&ld->start[words], ld->bytes_left).
osv:CVE-2019-15296
Complete source record
{
"id": "e516c5e4338f200eecb09063915edf386994769e0c0ccb649190636c66933783",
"url": "https://osv.dev/vulnerability/CVE-2019-15296",
"method": "structured",
"payload": {
"kind": "advisory",
"title": "CVE-2019-15296",
"summary": "An issue was discovered in Freeware Advanced Audio Decoder 2 (FAAD2) 2.8.8. The faad_resetbits function in libfaad/bits.c is affected by a buffer overflow vulnerability. The number of bits to be read is determined by ld->buffer_size - words*4, cast to uint32. If ld->buffer_size - words*4 is negative, a buffer overflow is later performed via getdword_n(&ld->start[words], ld->bytes_left).",
"evidence": "osv:CVE-2019-15296",
"products": [],
"severity": "high",
"structured": {
"id": "CVE-2019-15296",
"aliases": [
"CVE-2019-15296"
],
"metrics": [
{
"type": "CVSS_V3",
"score": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H"
}
],
"affected": [
{
"ranges": [
{
"repo": "https://github.com/knik0/faad2",
"type": "GIT",
"events": [
{
"introduced": "334e7647a5f31903aca33dde39bb8683e9d8cccd"
},
{
"last_affected": "334e7647a5f31903aca33dde39bb8683e9d8cccd"
},
{
"fixed": "942c3e0aee748ea6fe97cb2c1aa5893225316174"
}
],
"database_specific": {
"extracted_events": [
{
"cpe": "cpe:2.3:a:audiocoding:freeware_advanced_audio_decoder_2:2.8.8:*:*:*:*:*:*:*",
"range": [
{
"introduced": "2.8.8"
},
{
"last_affected": "2.8.8"
}
],
"source": "CPE_STRING"
},
{
"range": [
{
"fixed": "942c3e0aee748ea6fe97cb2c1aa5893225316174"
}
],
"source": "REFERENCES_COMMIT"
}
]
}
}
],
"versions": [
"2.8.8",
"2_8_8"
],
"database_specific": {
"source": "https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2019-15296.json",
"vanir_signatures": [
{
"id": "CVE-2019-15296-4aefd7e4",
"digest": {
"length": 745,
"function_hash": "124005640876210091824677984462777690187"
},
"source": "https://github.com/knik0/faad2/commit/942c3e0aee748ea6fe97cb2c1aa5893225316174",
"target": {
"file": "libfaad/bits.c",
"function": "faad_resetbits"
},
"deprecated": false,
"signature_type": "Function",
"signature_version": "v1"
},
{
"id": "CVE-2019-15296-5875c100",
"digest": {
"length": 622,
"function_hash": "165736104238157740616725237501300890403"
},
"source": "https://github.com/knik0/faad2/commit/942c3e0aee748ea6fe97cb2c1aa5893225316174",
"target": {
"file": "libfaad/syntax.c",
"function": "excluded_channels"
},
"deprecated": false,
"signature_type": "Function",
"signature_version": "v1"
},
{
"id": "CVE-2019-15296-d7b852b1",
"digest": {
"threshold": 0.9,
"line_hashes": [
"239380615314083555352035408016690435173",
"147704977208189036895939348227306827051",
"329365327040791695350858963688367662444",
"216007562013221147565173244163313314080"
]
},
"source": "https://github.com/knik0/faad2/commit/942c3e0aee748ea6fe97cb2c1aa5893225316174",
"target": {
"file": "libfaad/syntax.c"
},
"deprecated": false,
"signature_type": "Line",
"signature_version": "v1"
},
{
"id": "CVE-2019-15296-fdd5e5d9",
"digest": {
"threshold": 0.9,
"line_hashes": [
"296485932489754999999010566109813086322",
"251849693720230703288183735121492209136",
"36364199145169944277639805905228073757",
"82595847432278138315702463307550916764"
]
},
"source": "https://github.com/knik0/faad2/commit/942c3e0aee748ea6fe97cb2c1aa5893225316174",
"target": {
"file": "libfaad/bits.c"
},
"deprecated": false,
"signature_type": "Line",
"signature_version": "v1"
}
],
"vanir_signatures_modified": "2026-10-20T13:43:20Z"
}
}
],
"modified": "2026-10-20T13:43:20.568412718Z",
"provider": "osv",
"references": [
"https://seclists.org/bugtraq/2019/Sep/28",
"https://lists.debian.org/debian-lts-announce/2019/08/msg00033.html",
"https://security.gentoo.org/glsa/202006-17",
"https://www.debian.org/security/2019/dsa-4522",
"https://github.com/knik0/faad2/commit/942c3e0aee748ea6fe97cb2c1aa5893225316174"
],
"provider_metadata": {
"unresolved_ranges": [
{
"cpes": [
"cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*"
],
"vendor_product": "debian:debian_linux",
"extracted_events": [
{
"range": [
{
"introduced": "8.0"
},
{
"last_affected": "8.0"
}
],
"source": "CPE_STRING"
}
]
}
]
}
},
"related_cves": [
{
"value": "CVE-2019-15296",
"evidence": "/id"
}
],
"security_relevant": true,
"severity_evidence": "/severity/0/score"
},
"source_id": "core-osv",
"document_id": 387994,
"published_at": "2019-08-21T07:15:10.83+00:00"
}