What the vulnerability does

01Description

A null pointer dereference issue was discovered in 'FFmpeg' in decode_main_header() function of libavformat/nutdec.c file. The flaw occurs because the function lacks check of the return value of avformat_new_stream() and triggers the null pointer dereference error, causing an application to crash.

Key dates

02Disclosure timeline

January 12, 2023 CVE published
April 8, 2025 Record updated