Servers and applications
CVE-2022-3109
An issue was discovered in the FFmpeg package, where vp3_decode_frame in libavcodec/vp3.c lacks check of the return value of av_malloc() and will cause a null pointer dereference, impacting availability.
- Severity
- High 7.5
- Published
- 16 Dec 2022
- Last changed
- 17 Jun 2026
- Added to UpHeron
- 1 Nov 2026
- Fixed in
- 5.0.3
- Sources
- NVD
Affected software
| Software | Affected versions |
|---|---|
FFmpegServers and applications · cpe:a:ffmpeg:ffmpeg |
|