Explore top 10 tips to secure your open-source projects now. Read More

×
Alerts This Week
Warning Icon 1 441
Alerts This Week
Warning Icon 1 441

Mageia 8: MGASA-2023-0004 Critical: FFmpeg Null Pointer Dereference

mageia
Calendar Grey January 13, 2023
Dist Mageia Esm H88
Mageia 2023-0005 resolves a significant vulnerability in libarchive linked to buffer overflow issues. Patch immediately.
An issue was discovered in the FFmpeg package, where vp3_decode_frame in libavcodec/vp3.c lacks check of the return value of av_malloc() and will cause a null pointer dereference, ...

Summary

An issue was discovered in the FFmpeg package, where vp3_decode_frame in libavcodec/vp3.c lacks check of the return value of av_malloc() and will cause a null pointer dereference, impacting availability. (CVE-2022-3109)

References

- https://bugs.mageia.org/show_bug.cgi?id=31361

- https://lists.suse.com/pipermail/sle-security-updates/2023-January/013408.html

-

- https://www.cve.org/CVERecord?id=CVE-2022-3109

Topics%20covered

Topics Covered

security advisory critical software update null pointer ffmpeg availability mageia

Resolution

SRPMS

- 8/tainted/ffmpeg-4.3.5-1.1.mga8.tainted

- 8/core/ffmpeg-4.3.5-1.1.mga8

Severity
critical
Lowest
Low
Medium
High
Critical

Publication date: 13 Jan 2023
URL: https://advisories.mageia.org/MGASA-2023-0004.html
Type: security
CVE: CVE-2022-3109

Topics%20covered

Topics Covered

security advisory critical software update null pointer ffmpeg availability mageia

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.