A null pointer dereference vulnerability in rust-ffmpeg allows unauthenticated attackers to cause a denial of service condition.

This vulnerability is a null pointer dereference occurring within the name() method. The flaw is triggered when an attacker provides an unrecognized sample format, causing the application to crash due to a failure to validate the return value from the underlying C function, av_get_sample_fmt_name().

The exploitation of this vulnerability results in a denial of service, which can cause significant disruption to applications relying on the rust-ffmpeg library for media processing. With a CVSS score of 7.5, the risk is considered High, as the flaw is remotely exploitable without authentication and requires low attack complexity. This may lead to unexpected system downtime and loss of service availability for users.

Immediate Action: Monitor the upstream repository at https://github.com/meh/rust-ffmpeg/issues/192 for the release of an official patch or security update.

Proactive Monitoring: Review application logs for crashes or unexpected termination patterns in media processing workflows that might indicate an attempt to trigger this null pointer dereference.

Compensating Controls: Implement input validation at the application layer to filter or sanitize sample format inputs before they are passed to the rust-ffmpeg library.

Public Exploit Available: Unknown

Given the High severity and the availability of a proof-of-concept, organizations using rust-ffmpeg version 0.3.0 should prioritize monitoring for updates. Ensure that media processing pipelines are isolated where possible to minimize the impact of potential service disruptions until a formal fix is applied.