Executive brief
FLVMeta is a utility for analyzing and manipulating metadata in Flash video (FLV) files. A malformed FLV file can cause the application to crash with a null pointer dereference when parsing AMF (Action Message Format) object data, disrupting analysis workflows and potentially serving as a denial-of-service vector for file processing systems.
Technical details
This is a null pointer dereference vulnerability in the amf_object_get() function in src/amf.c. The vulnerability occurs when processing malformed FLV files with corrupted or incomplete AMF metadata; the function fails to validate that an object pointer is non-null before dereferencing it (accessing a member at offset 0x10), causing a segmentation fault. The attack vector is network/local: an attacker must supply a crafted FLV file to the application for processing. The vulnerability results in denial of service (application crash). A fix is available in commit 52642f7dfb76ec7334016622dde60b1ae963d79b, which adds proper null pointer validation before dereferencing the AMF object.
Affected products
- FLVMeta FLVMeta up to 1.2.2
Timeline
- 2026-07-02: disclosed
- 2026-08-31: patched: commit 52642f7dfb76ec7334016622dde60b1ae963d79b