CVE-2022-3109

CVE-2022-3109 is a high-severity vulnerability in the FFmpeg package, specifically within the vp3_decode_frame function in libavcodec/vp3.c. It stems from a missing return value check for av_malloc(), leading to a null pointer dereference that impacts availability. This affects various distributions including Debian and Fedora, as well as FFmpeg itself. The vulnerability has a CVSS score of 7.5 (High), indicating it can be exploited remotely with low attack complexity, resulting in a denial of service. There is no impact on confidentiality or integrity. Currently, there is no evidence of active exploitation, nor is exploit code available on platforms like Metasploit or ExploitDB. The vulnerability also lacks significant community discussion or media coverage, suggesting a low level of public awareness or immediate threat.