A null pointer dereference issue was discovered in 'FFmpeg' in decode_main_header() function of libavformat/nutdec.c file. The flaw occurs because the function lacks check of the return value of avformat_new_stream() and triggers the null pointer dereference error, causing an application to crash.
CVSS Details
- CVSS 3.1 Base Score: 5.3
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade ffmpeg | Jun 15, 2023 | Jan 12, 2023 |
| Ffmpeg | — | Upgrade to FFmpeg version 4.3.7Upgrade to FFmpeg version 5.1Upgrade to FFmpeg version 4.4.4Upgrade to FFmpeg version 5.0.3 | Jul 20, 2026 | Jan 12, 2023 |
| Freebsd | — | Upgrade emby-serverUpgrade emby-server-develUpgrade ffmpegUpgrade mythtvUpgrade mythtv-frontendUpgrade handbrakeUpgrade avidemuxUpgrade ffmpeg4 | Apr 14, 2023 | Apr 7, 2023 |
| Suse | — | Upgrade libavcodec57-32bitUpgrade libavutil56_70Upgrade ffmpeg-4-libavutil-develUpgrade libpostproc55_9Upgrade libswresample-develUpgrade libavresample3-32bitUpgrade libavresample4_0Upgrade ffmpegUpgrade libavutil55Upgrade libswscale-develUpgrade libavformat-develUpgrade libavresample-develUpgrade ffmpeg-4Upgrade libavfilter-develUpgrade libavformat58_76-32bitUpgrade libswresample2Upgrade libavutil55-32bitUpgrade libavdevice57Upgrade ffmpeg-4-libavfilter-develUpgrade ffmpeg-4-libswresample-develUpgrade libavcodec58_134Upgrade libavdevice-develUpgrade libswscale5_9Upgrade libswscale4-32bitUpgrade libpostproc54Upgrade ffmpeg-private-develUpgrade libswscale4Upgrade libavcodec-develUpgrade libavfilter7_110Upgrade ffmpeg-4-libavresample-develUpgrade ffmpeg-4-libavformat-develUpgrade libswresample3_9Upgrade ffmpeg-4-libswscale-develUpgrade ffmpeg-4-libavcodec-develUpgrade libavcodec58_134-32bitUpgrade libswscale5_9-32bitUpgrade ffmpeg-4-private-develUpgrade libavdevice58_13-32bitUpgrade ffmpeg-4-libavdevice-develUpgrade libavutil56_70-32bitUpgrade libavformat57Upgrade libavfilter6Upgrade libswresample3_9-32bitUpgrade libavformat58_76Upgrade ffmpeg-4-libpostproc-develUpgrade libavcodec57Upgrade libavresample3Upgrade libavresample4_0-32bitUpgrade libavfilter7_110-32bitUpgrade libpostproc55_9-32bitUpgrade libavutil-develUpgrade libavformat57-32bitUpgrade libavdevice58_13Upgrade libavdevice57-32bitUpgrade libpostproc54-32bitUpgrade libswresample2-32bitUpgrade libavfilter6-32bitUpgrade libpostproc-devel | Jan 27, 2023 | Jan 12, 2023 |
| Ubuntu | — | Upgrade libavfilter-extraUpgrade libswscale6Upgrade libavformat57 (Ubuntu Pro)Upgrade libavformat58 (Ubuntu Pro)Upgrade libavdevice58 (Ubuntu Pro)Upgrade libpostproc-ffmpeg53 (Ubuntu Pro)Upgrade libav-tools (Ubuntu Pro)Upgrade libavformat59Upgrade libavformat-extra (Ubuntu Pro)Upgrade libswscale-ffmpeg3 (Ubuntu Pro)Upgrade libavcodec58 (Ubuntu Pro)Upgrade libavresample3 (Ubuntu Pro)Upgrade libavformat-ffmpeg56 (Ubuntu Pro)Upgrade libavfilter-extra7 (Ubuntu Pro)Upgrade libswresample4Upgrade libavformat-extraUpgrade libavresample4 (Ubuntu Pro)Upgrade libswresample3 (Ubuntu Pro)Upgrade libavfilter-extra6 (Ubuntu Pro)Upgrade libavdevice59Upgrade libpostproc56Upgrade libavdevice-ffmpeg56 (Ubuntu Pro)Upgrade ffmpeg (Ubuntu Pro)Upgrade libavcodec-extra57 (Ubuntu Pro)Upgrade libavformat-extra59Upgrade libavcodec-extraUpgrade libavfilter7 (Ubuntu Pro)Upgrade libavcodec57 (Ubuntu Pro)Upgrade libpostproc54 (Ubuntu Pro)Upgrade libavfilter8Upgrade libavcodec59Upgrade libavresample-ffmpeg2 (Ubuntu Pro)Upgrade ffmpegUpgrade libavdevice57 (Ubuntu Pro)Upgrade libpostproc55 (Ubuntu Pro)Upgrade libswscale4 (Ubuntu Pro)Upgrade libavcodec-ffmpeg56 (Ubuntu Pro)Upgrade libavfilter6 (Ubuntu Pro)Upgrade libswresample-ffmpeg1 (Ubuntu Pro)Upgrade libavutil56 (Ubuntu Pro)Upgrade libswresample2 (Ubuntu Pro)Upgrade libavutil57Upgrade libavutil-ffmpeg54 (Ubuntu Pro)Upgrade libavfilter-ffmpeg5 (Ubuntu Pro)Upgrade libavcodec-extra59Upgrade libavfilter-extra (Ubuntu Pro)Upgrade libavformat-extra58 (Ubuntu Pro)Upgrade libavcodec-extra58 (Ubuntu Pro)Upgrade libavcodec-ffmpeg-extra56 (Ubuntu Pro)Upgrade libswscale5 (Ubuntu Pro)Upgrade libavcodec-extra (Ubuntu Pro)Upgrade libavfilter-extra8Upgrade libavutil55 (Ubuntu Pro) | Mar 22, 2023 | Jan 12, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub