mirror of
https://git.yoctoproject.org/poky
synced 2026-08-04 13:17:45 +02:00
An issue was discovered in the FFmpeg package, where vp3_decode_frame in libavcodec/vp3.c lacks check of
the return value of av_malloc() and will cause a null pointer dereference, impacting availability.
CVE: CVE-2022-3109
Upstream-Status: Backport [656cb0450a]
(From OE-Core rev: 874b72fe259cd3a23f4613fccfe2e9cc3f79cd6a)
Signed-off-by: Narpat Mali <narpat.mali@windriver.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>