CVE-2022-3341

A null pointer dereference issue was discovered in 'FFmpeg' in decode_main_header() function of libavformat/nutdec.c file. The flaw occurs because the function lacks check of the return value of avformat_new_stream() and triggers the null pointer dereference error, causing an application to crash.

• CWE-476
• CWE-476

• https://bugzilla.redhat.com/show_bug.cgi?id=2157054Issue Tracking, Patch, Third Party Advisory
• https://github.com/FFmpeg/FFmpeg/commit/9cf652cef49d74afe3d454f27d49eb1a1394951ePatch, Third Party Advisory
• https://lists.debian.org/debian-lts-announce/2023/06/msg00016.htmlThird Party Advisory
• https://bugzilla.redhat.com/show_bug.cgi?id=2157054Issue Tracking, Patch, Third Party Advisory
• https://github.com/FFmpeg/FFmpeg/commit/9cf652cef49d74afe3d454f27d49eb1a1394951ePatch, Third Party Advisory
• https://lists.debian.org/debian-lts-announce/2023/06/msg00016.htmlThird Party Advisory

Published

Jan 12, 2023

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2022-3335The Kadence WooCommerce Email Designer WordPress plugin befo…7.2
• CVE-2022-3336The Event Monster WordPress plugin before 1.2.0 does not hav…4.3
• CVE-2022-3337It was possible for a user to delete a VPN profile from WARP…8.5
• CVE-2022-3338An External XML entity (XXE) vulnerability in ePO prior to 5…5.4
• CVE-2022-3339A reflected cross-site scripting (XSS) vulnerability in ePO …6.1
• CVE-2022-3340XML External Entity (XXE) vulnerability in Trellix IPS Manag…7.2
• CVE-2022-3342The Jetpack CRM plugin for WordPress is vulnerable to PHAR d…8.8
• CVE-2022-3343The WPQA Builder WordPress plugin before 5.9.3 (which is a c…3.5
• CVE-2022-3344A flaw was found in the KVM's AMD nested virtualization (SVM…5.5
• CVE-2022-3346DNSSEC validation is not performed correctly. An attacker ca…6.5
• CVE-2022-3347DNSSEC validation is not performed correctly. An attacker ca…7.5
• CVE-2022-3348Just like in the previous report, an attacker could steal th…4.9