| Package | Affected versions | Patched versions |
|---|---|---|
| rust-ffmpeg | = 0.3.0 |
An issue was discovered in rust-ffmpeg 0.3.0 (after comit 5ac0527) A null pointer dereference vulnerability in the input() constructor function allows an attacker to cause a denial of service. The vulnerability is triggered when the avio_alloc_context() call fails and returns NULL, which is then stored and later dereferenced by the Io struct's Drop implementation.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free