An issue was discovered in the FFmpeg through 3.0. vp3_decode_frame in libavcodec/vp3.c lacks check of the return value of av_malloc() and will cause the null pointer dereference, impacting confidentiality and availability. CREATE(Triage):(User=admin) CVE-2022-3109 (https://nvd.nist.gov/vuln/detail/CVE-2022-3109)