CVE Vulnerabilities

CVE-2022-3341

NULL Pointer Dereference

Published: Jan 12, 2023 | Modified: Nov 21, 2024
CVSS 3.x
5.3
MEDIUM
Source:
NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
CVSS 2.x
RedHat/V2
RedHat/V3
Ubuntu
MEDIUM

A null pointer dereference issue was discovered in FFmpeg in decode_main_header() function of libavformat/nutdec.c file. The flaw occurs because the function lacks check of the return value of avformat_new_stream() and triggers the null pointer dereference error, causing an application to crash.

Weakness

A NULL pointer dereference occurs when the application dereferences a pointer that it expects to be valid, but is NULL, typically causing a crash or exit.

Affected Software

Name Vendor Start Version End Version
Ffmpeg Ffmpeg * 5.1 (excluding)
Ffmpeg Ubuntu bionic *
Ffmpeg Ubuntu esm-apps/bionic *
Ffmpeg Ubuntu esm-apps/focal *
Ffmpeg Ubuntu esm-apps/jammy *
Ffmpeg Ubuntu esm-apps/xenial *
Ffmpeg Ubuntu focal *
Ffmpeg Ubuntu jammy *
Ffmpeg Ubuntu trusty *
Ffmpeg Ubuntu upstream *
Ffmpeg Ubuntu xenial *

Potential Mitigations

References