A null pointer dereference issue was discovered in 'FFmpeg' in decode_main_header() function of libavformat/nutdec.c file. The flaw occurs because the function lacks check of the return value of avformat_new_stream() and triggers the null pointer dereference error, causing an application to crash.
CVSS Details
- CVSS 3.1 Base Score: 5.3
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade ffmpeg | Jun 15, 2023 | Jan 12, 2023 |
| Ffmpeg | — | Upgrade to FFmpeg version 5.1Upgrade to FFmpeg version 5.0.3Upgrade to FFmpeg version 4.3.7Upgrade to FFmpeg version 4.4.4 | Jul 20, 2026 | Jan 12, 2023 |
| Freebsd | — | Upgrade ffmpeg4Upgrade avidemuxUpgrade handbrakeUpgrade emby-server-develUpgrade mythtv-frontendUpgrade emby-serverUpgrade mythtvUpgrade ffmpeg | Apr 14, 2023 | Apr 7, 2023 |
| Suse | — | Upgrade ffmpeg-4-libavutil-develUpgrade ffmpeg-4-libavresample-develUpgrade libavutil56_70Upgrade ffmpeg-private-develUpgrade libavcodec57-32bitUpgrade libavcodec58_134Upgrade libavformat58_76-32bitUpgrade libavresample-develUpgrade libswscale-develUpgrade libavutil55Upgrade libpostproc55_9Upgrade libavcodec-develUpgrade libavdevice57Upgrade libswscale5_9Upgrade libswscale4Upgrade libavdevice-develUpgrade libswscale4-32bitUpgrade libavformat-develUpgrade libavresample4_0Upgrade ffmpeg-4-libswresample-develUpgrade libavutil55-32bitUpgrade libavresample3-32bitUpgrade libswresample-develUpgrade libpostproc54Upgrade libavfilter7_110Upgrade ffmpegUpgrade ffmpeg-4Upgrade libavfilter-develUpgrade ffmpeg-4-libavfilter-develUpgrade libswresample2Upgrade libavformat57-32bitUpgrade libpostproc55_9-32bitUpgrade libavcodec58_134-32bitUpgrade libavfilter6-32bitUpgrade ffmpeg-4-libavformat-develUpgrade libavdevice58_13Upgrade libpostproc54-32bitUpgrade libswresample3_9Upgrade libavdevice57-32bitUpgrade libpostproc-develUpgrade libavcodec57Upgrade libavfilter7_110-32bitUpgrade libavutil-develUpgrade ffmpeg-4-libpostproc-develUpgrade libavresample4_0-32bitUpgrade ffmpeg-4-private-develUpgrade ffmpeg-4-libavcodec-develUpgrade ffmpeg-4-libavdevice-develUpgrade libavdevice58_13-32bitUpgrade libavfilter6Upgrade libswresample3_9-32bitUpgrade ffmpeg-4-libswscale-develUpgrade libavutil56_70-32bitUpgrade libswresample2-32bitUpgrade libavformat58_76Upgrade libswscale5_9-32bitUpgrade libavformat57Upgrade libavresample3 | Jan 27, 2023 | Jan 12, 2023 |
| Ubuntu | — | Upgrade ffmpeg (Ubuntu Pro)Upgrade libpostproc56Upgrade libswscale-ffmpeg3 (Ubuntu Pro)Upgrade libavfilter-extraUpgrade libswscale6Upgrade libavdevice59Upgrade libavdevice-ffmpeg56 (Ubuntu Pro)Upgrade libavformat-extra59Upgrade libavformat58 (Ubuntu Pro)Upgrade libavformat-extra (Ubuntu Pro)Upgrade libavcodec-extra57 (Ubuntu Pro)Upgrade libavfilter-extra6 (Ubuntu Pro)Upgrade libavdevice58 (Ubuntu Pro)Upgrade libswresample4Upgrade libavcodec-extraUpgrade libavcodec58 (Ubuntu Pro)Upgrade libav-tools (Ubuntu Pro)Upgrade libavformat59Upgrade libavformat-extraUpgrade libavresample4 (Ubuntu Pro)Upgrade libswresample3 (Ubuntu Pro)Upgrade libpostproc-ffmpeg53 (Ubuntu Pro)Upgrade libavformat-ffmpeg56 (Ubuntu Pro)Upgrade libavresample3 (Ubuntu Pro)Upgrade libavformat57 (Ubuntu Pro)Upgrade libavfilter-extra7 (Ubuntu Pro)Upgrade libavresample-ffmpeg2 (Ubuntu Pro)Upgrade libavcodec-ffmpeg56 (Ubuntu Pro)Upgrade libswscale4 (Ubuntu Pro)Upgrade libpostproc54 (Ubuntu Pro)Upgrade libavutil57Upgrade libswscale5 (Ubuntu Pro)Upgrade libavutil-ffmpeg54 (Ubuntu Pro)Upgrade libavfilter7 (Ubuntu Pro)Upgrade libavfilter-ffmpeg5 (Ubuntu Pro)Upgrade libswresample-ffmpeg1 (Ubuntu Pro)Upgrade libavdevice57 (Ubuntu Pro)Upgrade libavutil56 (Ubuntu Pro)Upgrade libpostproc55 (Ubuntu Pro)Upgrade libavcodec-extra (Ubuntu Pro)Upgrade libavcodec59Upgrade libavformat-extra58 (Ubuntu Pro)Upgrade libavfilter6 (Ubuntu Pro)Upgrade libavcodec-extra58 (Ubuntu Pro)Upgrade libavcodec57 (Ubuntu Pro)Upgrade ffmpegUpgrade libavcodec-ffmpeg-extra56 (Ubuntu Pro)Upgrade libavcodec-extra59Upgrade libavfilter-extra (Ubuntu Pro)Upgrade libavfilter-extra8Upgrade libavutil55 (Ubuntu Pro)Upgrade libswresample2 (Ubuntu Pro)Upgrade libavfilter8 | Mar 22, 2023 | Jan 12, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub