7.5
High
CVE-2022-3109 An issue was discovered in the FFmpeg package, where vp3_decode_frame in libavcodec/vp3.c lacks check of the return…
Description
An issue was discovered in the FFmpeg package, where vp3_decode_frame in libavcodec/vp3.c lacks check of the return value of av_malloc() and will cause a null pointer dereference, impacting availability.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| ffmpeg | Versions not published |
References
- github.com github.com
- bugzilla.redhat.com bugzilla.redhat.com
- FEDORA-2023-1e24db98a6 lists.fedoraproject.org
- DSA-5394 www.debian.org
- [debian-lts-announce] 20230613 [SECURITY] [DLA 3454-1] ffmpeg security update lists.debian.org
Timeline
- Published
- Last modified
Other CVEs of ffmpeg
The 11 CVEs of ffmpeg →
CVE-2026-90816
A vulnerability was found in FFmpeg 8.0.x
5.3
Medium
CVE-2026-90815
A vulnerability has been found in FFmpeg up to 4.4.6/5.1.8/6.1.4/7.1.3/8.0.1
5.3
Medium
CVE-2025-1816
A vulnerability classified as problematic has been found in FFmpeg up to 6e26f57f672b05e7b8b052007a83aef99dc81ccb
5.3
Medium
CVE-2025-1594
A vulnerability, which was classified as critical, was found in FFmpeg up to 7.1
5.3
Medium