Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

debian логотип

CVE-2022-3109

Опубликовано: 16 дек. 2022
Источник: debian
EPSS Низкий

Описание

An issue was discovered in the FFmpeg package, where vp3_decode_frame in libavcodec/vp3.c lacks check of the return value of av_malloc() and will cause a null pointer dereference, impacting availability.

Пакеты

ПакетСтатусВерсия исправленияРелизТип
ffmpegfixed7:5.1-1package

Примечания

  • https://github.com/FFmpeg/FFmpeg/commit/656cb0450aeb73b25d7d26980af342b37ac4c568 (n5.1)

  • https://github.com/FFmpeg/FFmpeg/commit/7694a44baaaa4786995590a8ba2b16acd8ef8177 (n4.3.6)

  • https://github.com/FFmpeg/FFmpeg/commit/51efa68ec0b4f42b5b124b8987fb68f60a929c4f (n4.1.11)

EPSS

Процентиль: 40%
0.00181
Низкий

Связанные уязвимости

CVSS3: 7.5
ubuntu
около 3 лет назад

An issue was discovered in the FFmpeg package, where vp3_decode_frame in libavcodec/vp3.c lacks check of the return value of av_malloc() and will cause a null pointer dereference, impacting availability.

CVSS3: 7.5
nvd
около 3 лет назад

An issue was discovered in the FFmpeg package, where vp3_decode_frame in libavcodec/vp3.c lacks check of the return value of av_malloc() and will cause a null pointer dereference, impacting availability.

suse-cvrf
около 3 лет назад

Security update for ffmpeg-4

suse-cvrf
около 3 лет назад

Security update for ffmpeg

CVSS3: 7.5
github
около 3 лет назад

An issue was discovered in the FFmpeg through 3.0. vp3_decode_frame in libavcodec/vp3.c lacks check of the return value of av_malloc() and will cause the null pointer dereference, impacting confidentiality and availability.

EPSS

Процентиль: 40%
0.00181
Низкий