A null pointer dereference issue was discovered in ... · CVE-2022-3341 · GitHub Advisory Database · GitHub

A null pointer dereference issue was discovered in ...

Moderate severity Unreviewed Published Jan 12, 2023 to the GitHub Advisory Database • Updated Jun 13, 2023

Package

No package listed— Suggest a package

Affected versions

Unknown

Patched versions

Unknown

Description

A null pointer dereference issue was discovered in 'FFmpeg' in decode_main_header() function of libavformat/nutdec.c file. The flaw occurs because the function lacks check of the return value of avformat_new_stream() and triggers the null pointer dereference error, causing an application to crash.

References

Published by the National Vulnerability Database

Jan 12, 2023

Published to the GitHub Advisory Database Jan 12, 2023

Last updated Jun 13, 2023

Severity

Moderate

5.3

/ 10

CVSS base metrics

Attack vector

Network

Attack complexity

Low

Privileges required

None

User interaction

None

Scope

Unchanged

Confidentiality

None

Integrity

None

Availability

Low

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L