CVE-2022-3341

2023-01-1200:00:00

CWE-476

fedora

www.cve.org

ffmpeg

null pointer dereference

decode_main_header

libavformat

nutdec

avformat_new_stream

AI Score

6.4

Confidence

High

EPSS

0.001

Percentile

42.9%

JSON

A null pointer dereference issue was discovered in ‘FFmpeg’ in decode_main_header() function of libavformat/nutdec.c file. The flaw occurs because the function lacks check of the return value of avformat_new_stream() and triggers the null pointer dereference error, causing an application to crash.

CNA Affected

[
  {
    "vendor": "n/a",
    "product": "FFmpeg",
    "versions": [
      {
        "version": "Fixed-in ffmpeg 5.1",
        "status": "affected"
      }
    ]
  }
]