CVE catalog

CVE-2022-36148

fdkaac vulnerabilities

[CVE catalog]

Severity
Medium
Published
Source
[NVD] · [CVE record]
EPSS
0.48% · Oct 25, 2026

fdkaac commit 53fe239 was discovered to contain a floating point exception (FPE) via wav_open at /src/wav_reader.c.

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

DistributionPackageReleaseVersionStatus
Debianfdkaacsid1.0.6-0.1fixed
Debianfdkaacforky1.0.6-0.1fixed
Debianfdkaactrixie1.0.6-0.1fixed
Debianfdkaacbookworm1.0.0-1vulnerable
UbuntufdkaacnobleNot reportedvulnerable
Ubuntufdkaacnoble1.0.0-1ubuntu0.24.04.1~esm1fixed
Ubuntufdkaacpro1.0.0-1build1vulnerable
Ubuntufdkaacpro1.0.0-1ubuntu0.24.04.1~esm1fixed

Fixed-version evidence

DistributionPackageTypeReleaseFixed versionUrgencyOriginBugs
Debianfdkaacsourcesid1.0.6-0.1unimportantNot reported[1017751]
Debianfdkaacsourceforky1.0.6-0.1unimportantNot reported[1017751]
Debianfdkaacsourcetrixie1.0.6-0.1unimportantNot reported[1017751]
Debianfdkaacsourcebookworm(unfixed)unimportantNot reported[1017751]
Ubuntufdkaacdebnoble1.0.0-1ubuntu0.24.04.1~esm1Not reportedNot reportedNot reported
Ubuntufdkaacdebpro1.0.0-1ubuntu0.24.04.1~esm1Not reportedUSN-7660-1Not reported

[Debian bug #1017751]

OpenFactory catalog packages

[Debian 12 (Bookworm)]

  • [fdkaac]Affected
    Details (1)
    • 1.0.0-1 · amd64 · bookworm

      Affected

      usn · fdkaac · debian · bookworm

Observed:

References