A null pointer dereference issue was discovered in 'FFmpeg' in decode_main_header() function of libavformat/nutdec.c file. The flaw occurs because the function lacks check of the return value of avformat_new_stream() and triggers the null pointer dereference error, causing an application to crash.
CVSS Details
- CVSS 3.1 Base Score: 5.3
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade ffmpeg | Jun 15, 2023 | Jan 12, 2023 |
| Ffmpeg | — | Upgrade to FFmpeg version 4.3.7Upgrade to FFmpeg version 4.4.4Upgrade to FFmpeg version 5.0.3Upgrade to FFmpeg version 5.1 | Jul 20, 2026 | Jan 12, 2023 |
| Freebsd | — | Upgrade emby-server-develUpgrade emby-serverUpgrade mythtv-frontendUpgrade ffmpegUpgrade mythtvUpgrade handbrakeUpgrade avidemuxUpgrade ffmpeg4 | Apr 14, 2023 | Apr 7, 2023 |
| Suse | — | Upgrade libavdevice58_13-32bitUpgrade libswresample3_9Upgrade libavcodec57Upgrade libswresample3_9-32bitUpgrade libpostproc54-32bitUpgrade ffmpeg-4-libavformat-develUpgrade libavresample3Upgrade libavformat58_76Upgrade libavutil56_70-32bitUpgrade libavformat57-32bitUpgrade libavfilter6-32bitUpgrade libavdevice58_13Upgrade ffmpeg-4-libpostproc-develUpgrade libavformat57Upgrade libswscale5_9-32bitUpgrade libavfilter6Upgrade libswresample2-32bitUpgrade ffmpeg-4-libavcodec-develUpgrade ffmpeg-4-libswscale-develUpgrade libavcodec58_134-32bitUpgrade ffmpeg-4-private-develUpgrade libavutil-develUpgrade libavfilter7_110-32bitUpgrade libavresample4_0-32bitUpgrade libpostproc55_9-32bitUpgrade ffmpeg-4-libavdevice-develUpgrade libpostproc-develUpgrade libavdevice57-32bitUpgrade libavutil55-32bitUpgrade ffmpeg-4-libavfilter-develUpgrade libavcodec57-32bitUpgrade libavformat-develUpgrade libavdevice57Upgrade libavresample4_0Upgrade libavcodec58_134Upgrade ffmpeg-4-libavresample-develUpgrade libswscale5_9Upgrade libswresample-develUpgrade libavfilter-develUpgrade libavresample3-32bitUpgrade ffmpeg-4-libavutil-develUpgrade libswscale4-32bitUpgrade ffmpeg-private-develUpgrade libavutil56_70Upgrade libswscale4Upgrade libpostproc55_9Upgrade libavutil55Upgrade libpostproc54Upgrade libavresample-develUpgrade libavdevice-develUpgrade libavformat58_76-32bitUpgrade ffmpeg-4Upgrade libavcodec-develUpgrade ffmpegUpgrade libavfilter7_110Upgrade libswresample2Upgrade libswscale-develUpgrade ffmpeg-4-libswresample-devel | Jan 27, 2023 | Jan 12, 2023 |
| Ubuntu | — | Upgrade libav-tools (Ubuntu Pro)Upgrade libavformat-extraUpgrade libavresample4 (Ubuntu Pro)Upgrade libavresample3 (Ubuntu Pro)Upgrade libavformat-ffmpeg56 (Ubuntu Pro)Upgrade libavfilter-extraUpgrade libavformat-extra (Ubuntu Pro)Upgrade libswresample3 (Ubuntu Pro)Upgrade libavformat58 (Ubuntu Pro)Upgrade libavcodec-extraUpgrade libavformat59Upgrade libavcodec58 (Ubuntu Pro)Upgrade libswresample4Upgrade libavfilter-extra7 (Ubuntu Pro)Upgrade libpostproc-ffmpeg53 (Ubuntu Pro)Upgrade libavdevice58 (Ubuntu Pro)Upgrade libavformat57 (Ubuntu Pro)Upgrade libpostproc56Upgrade libavfilter-extra6 (Ubuntu Pro)Upgrade libswscale-ffmpeg3 (Ubuntu Pro)Upgrade libswscale6Upgrade libavdevice-ffmpeg56 (Ubuntu Pro)Upgrade libavdevice59Upgrade libavformat-extra59Upgrade ffmpeg (Ubuntu Pro)Upgrade libavcodec-extra57 (Ubuntu Pro)Upgrade libavfilter-extra8Upgrade libavutil57Upgrade libavcodec57 (Ubuntu Pro)Upgrade libavresample-ffmpeg2 (Ubuntu Pro)Upgrade libavfilter-extra (Ubuntu Pro)Upgrade ffmpegUpgrade libavutil55 (Ubuntu Pro)Upgrade libpostproc54 (Ubuntu Pro)Upgrade libavcodec-ffmpeg-extra56 (Ubuntu Pro)Upgrade libswresample-ffmpeg1 (Ubuntu Pro)Upgrade libavcodec59Upgrade libavfilter7 (Ubuntu Pro)Upgrade libavfilter6 (Ubuntu Pro)Upgrade libpostproc55 (Ubuntu Pro)Upgrade libswscale5 (Ubuntu Pro)Upgrade libswscale4 (Ubuntu Pro)Upgrade libavcodec-extra (Ubuntu Pro)Upgrade libavcodec-ffmpeg56 (Ubuntu Pro)Upgrade libavfilter-ffmpeg5 (Ubuntu Pro)Upgrade libavutil-ffmpeg54 (Ubuntu Pro)Upgrade libavcodec-extra58 (Ubuntu Pro)Upgrade libswresample2 (Ubuntu Pro)Upgrade libavformat-extra58 (Ubuntu Pro)Upgrade libavutil56 (Ubuntu Pro)Upgrade libavfilter8Upgrade libavdevice57 (Ubuntu Pro)Upgrade libavcodec-extra59 | Mar 22, 2023 | Jan 12, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub