A high-severity NULL pointer dereference vulnerability in FFmpeg enables unauthenticated attackers to crash applications via malicious video files.

This vulnerability is a NULL pointer dereference flaw located in the get_min_buffer_size function within the slice.c source file. Unauthenticated remote attackers can trigger this condition by providing a specially crafted video file, resulting in an application crash.

The primary impact of this vulnerability is the loss of service for any application utilizing the affected FFmpeg library, which may lead to significant operational disruption. Given the CVSS score of 7.5, the vulnerability is classified as high severity, posing a threat to system availability and reliability in environments that process untrusted media content.

Immediate Action: Monitor the official FFmpeg issue tracker and repository for the release of a patch or a security update, and apply it as soon as it becomes available.

Proactive Monitoring: Review system and application logs for repeated crash events or segmentation faults associated with media processing services.

Compensating Controls: Implement strict input validation or sandboxing for any media processing pipelines to restrict the processing of untrusted or externally sourced video files until a patch is applied.

Public Exploit Available: No (exploit_available: unknown)

While a specific patch is currently pending, organizations should identify all internal services that depend on the FFmpeg library. Once a fix is released by the vendor, prioritized deployment is necessary to prevent potential service disruption caused by malicious video inputs.