Lucene search

K
cnvdChina National Vulnerability DatabaseCNVD-2023-64453
HistoryJan 17, 2023 - 12:00 a.m.

FFmpeg Denial of Service Vulnerability (CNVD-2023-64453)

2023-01-1700:00:00
China National Vulnerability Database
www.cnvd.org.cn
10
ffmpeg
vulnerability
denial of service

EPSS

0.001

Percentile

42.9%

FFmpeg is a complete solution for recording, converting and streaming audio and video from the FFmpeg team. A denial of service vulnerability exists in FFmpeg, which stems from a lack of return value checking in the decode_main_header() function in the libavformat/nutdec.c file and triggers a null pointer dereference error, which can be exploited by an attacker to cause the application to crash.