FFmpeg 7.0+ NULL Pointer Dereference in FFmpeg String Handling (avstring.c)  – Full Disclosure

Posted by Ron E on Sep 08

Improper validation in libavutil/avstring.c allows a NULL pointer
dereference when processing certain strings in HLS contexts. UBSan reports
“applying zero offset to null pointer.” Triggers denial of service (DoS)
when FFmpeg processes malicious playlists or malformed URLs. (FFmpeg 7.0 –
8.0)

*Impact:*

–

Consistently crashes the process (DoS).
–

Exploitation beyond denial of service is unlikely on modern OSes.

*Proof…
 – Read More  – Full Disclosure