Bug 891785 (CVE-2022-47021)

Summary:	media-libs/opusfile: null pointer dereference
Product:	Gentoo Security	Reporter:	John Helmert III <ajak>
Component:	Vulnerabilities	Assignee:	Gentoo Security <security>
Status:	CONFIRMED ---
Severity:	minor	CC:	sound, steils
Priority:	Normal
Version:	unspecified
Hardware:	All
OS:	Linux
URL:	https://github.com/xiph/opusfile/issues/36
Whiteboard:	B3 [upstream/ebuild]
Package list:		Runtime testing required:	---

Description John Helmert III archtester

2023-01-22 23:34:41 UTC

CVE-2022-47021:

A null pointer dereference issue was discovered in functions op_get_data and op_open1 in opusfile.c in xiph opusfile 0.9 thru 0.12 allows attackers to cause denial of service or other unspecified impacts.

Patch: https://github.com/xiph/opusfile/commit/0a4cd796df5b030cb866f3f4a5e41a4b92caddf5