A null pointer dereference issue was discovered in 'FFmpeg' in decode_main_header() function of libavformat/nutdec.c file. The flaw occurs because the function lacks check of the return value of avformat_new_stream() and triggers the null pointer dereference error, causing an application to crash.
CVSS Details
- CVSS 3.1 Base Score: 5.3
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade ffmpeg | Jun 15, 2023 | Jan 12, 2023 |
| Ffmpeg | — | Upgrade to FFmpeg version 4.4.4Upgrade to FFmpeg version 5.0.3Upgrade to FFmpeg version 5.1Upgrade to FFmpeg version 4.3.7 | Jul 20, 2026 | Jan 12, 2023 |
| Freebsd | — | Upgrade mythtvUpgrade ffmpegUpgrade emby-server-develUpgrade emby-serverUpgrade mythtv-frontendUpgrade ffmpeg4Upgrade handbrakeUpgrade avidemux | Apr 14, 2023 | Apr 7, 2023 |
| Suse | — | Upgrade libswresample2-32bitUpgrade ffmpeg-4-libavcodec-develUpgrade libavresample3Upgrade libswresample3_9Upgrade libavfilter7_110-32bitUpgrade libavresample4_0-32bitUpgrade libavutil-develUpgrade libswscale5_9-32bitUpgrade libavfilter6Upgrade ffmpeg-4-libavdevice-develUpgrade libavdevice58_13-32bitUpgrade libswresample3_9-32bitUpgrade libpostproc55_9-32bitUpgrade ffmpeg-4-libswscale-develUpgrade libavdevice57-32bitUpgrade ffmpeg-4-libpostproc-develUpgrade ffmpeg-4-libavformat-develUpgrade libpostproc54-32bitUpgrade libavdevice58_13Upgrade libavformat57-32bitUpgrade libavformat57Upgrade libavformat58_76Upgrade libavutil56_70-32bitUpgrade libavcodec58_134-32bitUpgrade libavcodec57Upgrade libpostproc-develUpgrade libavfilter6-32bitUpgrade ffmpeg-4-private-develUpgrade libpostproc55_9Upgrade ffmpegUpgrade ffmpeg-4-libavutil-develUpgrade libavresample3-32bitUpgrade libavcodec-develUpgrade libavutil55-32bitUpgrade ffmpeg-4-libavfilter-develUpgrade ffmpeg-4-libswresample-develUpgrade libswscale-develUpgrade libavutil55Upgrade libavresample4_0Upgrade libswscale4-32bitUpgrade libavdevice57Upgrade ffmpeg-private-develUpgrade ffmpeg-4-libavresample-develUpgrade libswscale5_9Upgrade libavdevice-develUpgrade libavcodec58_134Upgrade libavutil56_70Upgrade libswscale4Upgrade libavformat-develUpgrade libpostproc54Upgrade libavformat58_76-32bitUpgrade libavcodec57-32bitUpgrade libavresample-develUpgrade libavfilter-develUpgrade libswresample-develUpgrade libavfilter7_110Upgrade ffmpeg-4Upgrade libswresample2 | Jan 27, 2023 | Jan 12, 2023 |
| Ubuntu | — | Upgrade libswresample3 (Ubuntu Pro)Upgrade libavdevice59Upgrade libavresample4 (Ubuntu Pro)Upgrade libavformat59Upgrade libavfilter-extra6 (Ubuntu Pro)Upgrade libswscale6Upgrade libavcodec-extraUpgrade libavformat-ffmpeg56 (Ubuntu Pro)Upgrade libavcodec58 (Ubuntu Pro)Upgrade libavresample3 (Ubuntu Pro)Upgrade libavdevice58 (Ubuntu Pro)Upgrade libswscale-ffmpeg3 (Ubuntu Pro)Upgrade libavdevice-ffmpeg56 (Ubuntu Pro)Upgrade libavformat-extraUpgrade libavfilter-extraUpgrade libavformat-extra (Ubuntu Pro)Upgrade libavformat-extra59Upgrade libavfilter-extra7 (Ubuntu Pro)Upgrade ffmpeg (Ubuntu Pro)Upgrade libpostproc56Upgrade libavformat58 (Ubuntu Pro)Upgrade libav-tools (Ubuntu Pro)Upgrade libavcodec-extra57 (Ubuntu Pro)Upgrade libpostproc-ffmpeg53 (Ubuntu Pro)Upgrade libswresample4Upgrade libavformat57 (Ubuntu Pro)Upgrade libavcodec59Upgrade libswresample-ffmpeg1 (Ubuntu Pro)Upgrade libswresample2 (Ubuntu Pro)Upgrade libavcodec-extra58 (Ubuntu Pro)Upgrade libavfilter6 (Ubuntu Pro)Upgrade libavutil57Upgrade libpostproc55 (Ubuntu Pro)Upgrade libavutil56 (Ubuntu Pro)Upgrade libavdevice57 (Ubuntu Pro)Upgrade libpostproc54 (Ubuntu Pro)Upgrade libavcodec-ffmpeg-extra56 (Ubuntu Pro)Upgrade libavformat-extra58 (Ubuntu Pro)Upgrade libavfilter7 (Ubuntu Pro)Upgrade libswscale4 (Ubuntu Pro)Upgrade libavutil55 (Ubuntu Pro)Upgrade libavresample-ffmpeg2 (Ubuntu Pro)Upgrade libavcodec-extra59Upgrade libavfilter-extra8Upgrade ffmpegUpgrade libavfilter-extra (Ubuntu Pro)Upgrade libavcodec57 (Ubuntu Pro)Upgrade libswscale5 (Ubuntu Pro)Upgrade libavcodec-extra (Ubuntu Pro)Upgrade libavfilter-ffmpeg5 (Ubuntu Pro)Upgrade libavutil-ffmpeg54 (Ubuntu Pro)Upgrade libavfilter8Upgrade libavcodec-ffmpeg56 (Ubuntu Pro) | Mar 22, 2023 | Jan 12, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub