Alerts This Week
Warning Icon 1 631
Alerts This Week
Warning Icon 1 631

Mageia 8: MSASA-2023-0043 Moderate: FFmpeg Null Pointer Error Fix

mageia
Calendar Grey February 14, 2023
Dist Mageia Esm H88
Mageia's FFmpeg patch resolves a null pointer dereference vulnerability that leads to application instability.
A null pointer dereference issue was discovered in 'FFmpeg' in decode_main_header() function of libavformat/nutdec.c file

Summary

A null pointer dereference issue was discovered in 'FFmpeg' in decode_main_header() function of libavformat/nutdec.c file. The flaw occurs because the function lacks check of the return value of avformat_new_stream() and triggers the null pointer dereference error, causing an application to crash. (CVE-2022-3341)

References

- https://bugs.mageia.org/show_bug.cgi?id=31460

- https://nvd.nist.gov/vuln/detail/CVE-2022-3341

- https://security-tracker.debian.org/tracker/CVE-2022-3341

- https://www.cve.org/CVERecord?id=CVE-2022-3341

Resolution

SRPMS

- 8/core/ffmpeg-4.3.5-1.2.mga8

- 8/tainted/ffmpeg-4.3.5-1.2.mga8.tainted

Publication date: 14 Feb 2023
URL: https://advisories.mageia.org/MGASA-2023-0043.html
Type: security
CVE: CVE-2022-3341

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Related News

Your message here