Home / mailings

PDF

[USN-7660-1] fdkaac vulnerabilities

Posted on 22 July 2025
Ubuntu Security

==========================================================================Ubuntu Security Notice USN-7660-1
July 22, 2025

fdkaac vulnerabilities
==========================================================================
A security issue affects these releases of Ubuntu and its derivatives:

- Ubuntu 25.04
- Ubuntu 24.04 LTS
- Ubuntu 22.04 LTS
- Ubuntu 20.04 LTS
- Ubuntu 18.04 LTS
- Ubuntu 16.04 LTS

Summary:

Several security issues were fixed in fdkaac.

Software Description:
- fdkaac: Command line frontend for libfdk-aac

Details:

It was discovered that fdkaac did not correctly handle certain input. If a
user or automated system were tricked into opening a specially crafted
file, an attacker could possibly use this issue to cause a denial of
service. (CVE-2022-36148)

It was discovered that fdkaac did not correctly handle certain memory
operations. If a user or automated system were tricked into opening a
specially crafted file, an attacker could possibly use this issue to cause
a denial of service. (CVE-2022-37781, CVE-2023-34823, CVE-2023-34824)

Update instructions:

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 25.04
fdkaac 1.0.0-1ubuntu0.25.04.1

Ubuntu 24.04 LTS
fdkaac 1.0.0-1ubuntu0.24.04.1~esm1
Available with Ubuntu Pro

Ubuntu 22.04 LTS
fdkaac 1.0.0-1ubuntu0.22.04.1~esm1
Available with Ubuntu Pro

Ubuntu 20.04 LTS
fdkaac 0.6.3-1ubuntu0.20.04.1~esm1
Available with Ubuntu Pro

Ubuntu 18.04 LTS
fdkaac 0.6.3-1ubuntu0.18.04.1~esm1
Available with Ubuntu Pro

Ubuntu 16.04 LTS
fdkaac 0.6.2-1ubuntu0.1~esm1
Available with Ubuntu Pro

In general, a standard system update will make all the necessary changes.

References:
https://ubuntu.com/security/notices/USN-7660-1
CVE-2022-36148, CVE-2022-37781, CVE-2023-34823, CVE-2023-34824

Package Information:
https://launchpad.net/ubuntu/+source/fdkaac/1.0.0-1ubuntu0.25.04.1

--===============7295666711576449590==Content-Type: application/pgp-signature; name="signature.asc"
Content-Description: OpenPGP digital signature

 

TOP