CVE-2022-3109

HighCVSS 7.5/10Last modified Jun 17, 2026

Description

An issue was discovered in the FFmpeg package, where vp3_decode_frame in libavcodec/vp3.c lacks check of the return value of av_malloc() and will cause a null pointer dereference, impacting availability.

Metrics

CVSS 3.1 7.5/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Weakness enumeration

CWE-476

Affected software

No affected versions have been published.

Timeline

Published: Dec 16, 2022
Last modified: Jun 17, 2026
NVD status: Analyzed

Related CVEs from 2022

CVE-2022-310907.7Guzzle, an extensible PHP HTTP client. `Authorization` headers on requests are sensitive information. In affected versions when using our Cu CVE-2022-310917.7Guzzle, an extensible PHP HTTP client. `Authorization` and `Cookie` headers on requests are sensitive information. In affected versions on m CVE-2022-310928.1Pimcore is an Open Source Data & Experience Management Platform. Pimcore offers developers listing classes to make querying data easier. Thi CVE-2022-310937.5NextAuth.js is a complete open source authentication solution for Next.js applications. In affected versions an attacker can send a request CVE-2022-310946.1ScratchTools is a web extension designed to make interacting with the Scratch programming language community (Scratching) easier. In affecte CVE-2022-310956.5discourse-chat is a chat plugin for the Discourse application. Versions prior to 0.4 are vulnerable to an exposure of sensitive information,CVE-2022-310965.7Discourse is an open source discussion platform. Under certain conditions, a logged in user can redeem an invite with an email that either d CVE-2022-310978.7Grafana is an open-source platform for monitoring and observability. Versions on the 8.x and 9.x branch prior to 9.0.3, 8.5.9, 8.4.10, and 8 CVE-2022-310987.5Weave GitOps is a simple open source developer platform for people who want cloud native applications, without needing Kubernetes expertise.CVE-2022-310996.5rulex is a new, portable, regular expression language. When parsing untrusted rulex expressions, the stack may overflow, possibly enabling a CVE-2022-31105.5An issue was discovered in the Linux kernel through 5.16-rc6. _rtw_init_xmit_priv in drivers/staging/r8188eu/core/rtw_xmit.c lacks check of CVE-2022-311006.5rulex is a new, portable, regular expression language. When parsing untrusted rulex expressions, rulex may crash, possibly enabling a Denial