{"action":"Upgrade ffmpeg to 7:5.1-1 or later.","affected":[{"fixed":"7:5.1-1","introduced":"0"}],"component":"ffmpeg","cve_ids":[],"ecosystem":"Debian","ecosystem_qualifier":"Debian:12","exploited":false,"fixed_versions":["7:5.1-1"],"id":"tcs_01M5NGS3H3K05AWD5DSP7BGGJN","modified_at":"2026-10-15T08:02:43.955232674Z","published_at":"2023-01-12T15:15:10.007Z","references":["https://osv.dev/vulnerability/DEBIAN-CVE-2022-3341","https://security-tracker.debian.org/tracker/CVE-2022-3341"],"severity":{"label":"medium","score":5.3},"sources":[{"source":"osv","source_id":"DEBIAN-CVE-2022-3341","url":"https://osv.dev/vulnerability/DEBIAN-CVE-2022-3341"}],"summary":"A null pointer dereference issue was discovered in 'FFmpeg' in decode_main_header() function of libavformat/nutdec.c file. The flaw occurs because the function lacks check of the return value of avfor"}