In FFmpeg before 4.2, avcodec_open2 in libavcodec/utils.c allows a NULL pointer dereference and possibly unspecified other impact when there is no valid close function pointer.
[ { "source": "https://github.com/ffmpeg/ffmpeg/commit/8df6884832ec413cf032dfaa45c23b1c7876670c", "deprecated": false, "digest": { "function_hash": "205206128562018730369807501325477623210", "length": 17416.0 }, "target": { "file": "libavcodec/utils.c", "function": "avcodec_open2" }, "id": "CVE-2019-17539-1794bf98", "signature_type": "Function", "signature_version": "v1" }, { "source": "https://github.com/ffmpeg/ffmpeg/commit/8df6884832ec413cf032dfaa45c23b1c7876670c", "deprecated": false, "digest": { "line_hashes": [ "220330626061826535315657386462474702952", "284434091912125655641126633699664364654", "169031453947109328122480615508055499488", "274679704614273153990806559594132734773" ], "threshold": 0.9 }, "target": { "file": "libavcodec/utils.c" }, "id": "CVE-2019-17539-64ec3124", "signature_type": "Line", "signature_version": "v1" } ]