CVE-2017-14225

CVE-2017-14225 describes a NULL pointer dereference vulnerability in FFmpeg versions up to 3.3.3, specifically within the av_color_primaries_name function. This flaw can be triggered when processing specially crafted media files, as the function may return a NULL pointer that subsequent callers, like avcodec_string, do not properly handle. Rated with a CVSS v3 score of 8.8 (High), this vulnerability is remotely exploitable with low attack complexity, potentially leading to high impact on confidentiality, integrity, and availability. There is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage surrounding this CVE.