CVE-2022-47021
A null pointer dereference issue was discovered in functions op_get_data and op_open1 in opusfile.c in xiph opusfile 0.9 thru 0.12 allows attackers to cause denial of service or ot
Published Jan 20, 2023 · updated Oct 15, 2026
A null pointer dereference issue was discovered in functions op_get_data and op_open1 in opusfile.c in xiph opusfile 0.9 thru 0.12 allows attackers to cause denial of service or other unspecified impacts.
Code
The project this record applies to. Exploit listings stay in References.
No public source repository is identified for this product.
Timeline
Detection, updates, and resolution for this record.
Jan 20, 2023 · OSV.dev
Detected
A null pointer dereference issue was discovered in functions op_get_data and op_open1 in opusfile.c in xiph opusfile 0.9 thru 0.12 allows attackers to cause denial of service or other unspecified impacts.
Oct 15, 2026 · OSV.dev
Fix available
opusfile fixed in 0.12-r3; opusfile fixed in 0.12-r3; opusfile fixed in 0.12-r4; opusfile fixed in 0.12-r4
Oct 15, 2026 · OSV.dev
Fix available
opusfile fixed in 0.12-r3
Oct 15, 2026 · OSV.dev
Fix available
opusfile fixed in 0.12-r4
Oct 15, 2026 · OSV.dev
Updated
A null pointer dereference issue was discovered in functions op_get_data and op_open1 in opusfile.c in xiph opusfile 0.9 thru 0.12 allows attackers to cause denial of service or other unspecified impacts.
Affected
- Alpine:v3.15 opusfile0.9 → 0.12-r3
- Alpine:v3.16 opusfile0.9 → 0.12-r3
- Alpine:v3.17 opusfile0.9 → 0.12-r4
- Alpine:v3.18 opusfile0.9 → 0.12-r4
- Alpine:v3.19 opusfile0.9 → 0.12-r4
- Alpine:v3.20 opusfile0.9 → 0.12-r4
- Alpine:v3.21 opusfile0.9 → 0.12-r4
- Alpine:v3.22 opusfile0.9 → 0.12-r4
- Alpine:v3.23 opusfile0.9 → 0.12-r4
- Alpine:v3.24 opusfile0.9 → 0.12-r4