CVE-2022-3341

Katalog CVE

CVSS 5.3 · Medium EPSS 0,82%

Kerentanan NULL Pointer Dereference pada debian linux, ffmpeg. Skor CVSS 3.1 5.3 (Medium) menurut NVD.

Deskripsi (NVD)

A null pointer dereference issue was discovered in 'FFmpeg' in decode_main_header() function of libavformat/nutdec.c file. The flaw occurs because the function lacks check of the return value of avformat_new_stream() and triggers the null pointer dereference error, causing an application to crash.

Rincian

Terbit di NVD

12 Januari 2023

Terakhir diubah

17 Juni 2026

Status NVD

Analyzed

CVSS 3.1

5.3 (Medium), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-476: NULL Pointer Dereference

EPSS (30 hari)

0,82% peluang dieksploitasi; lebih tinggi dari 56,2% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://bugzilla.redhat.com/show_bug.cgi?id=2157054 issue tracking · patch · advisory pihak ketiga
• https://github.com/FFmpeg/FFmpeg/commit/9cf652cef49d74afe3d454f27d49eb1a1394951e patch · advisory pihak ketiga
• https://lists.debian.org/debian-lts-announce/2023/06/msg00016.html advisory pihak ketiga