CVE-2022-3341: Null Pointer Dereference
A null pointer dereference issue was discovered in 'FFmpeg' in decodemainheader() function of libavformat/nutdec.c file. The flaw occurs because the function lacks check of the return value of avformatnewstream() and triggers the null pointer dereference error, causing an application to crash.
Other sources
An issue was discovered in the FFmpeg in decodemainheader in libavformat/nutdec.c lacks check of the return value of avformatnewstream() and will cause the null pointer dereference.
https://github.com/FFmpeg/FFmpeg/commit/9cf652cef49d74afe3d454f27d49eb1a1394951e
— Red Hat
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is CVE-2022-3341?
CVE-2022-3341 is a null pointer dereference issue in FFmpeg.
How does the null pointer dereference issue occur in FFmpeg?
The null pointer dereference issue occurs in the decode_main_header() function of the libavformat/nutdec.c file in FFmpeg when the return value of avformat_new_stream() is not checked.
What is the impact of CVE-2022-3341?
The vulnerability can cause an application using FFmpeg to crash due to the null pointer dereference error.
How can I fix CVE-2022-3341?
To fix CVE-2022-3341, update FFmpeg to version 5.1 or later.
Where can I find more information about CVE-2022-3341?
You can find more information about CVE-2022-3341 at the following references: [1] [2] [3]