A NULL pointer dereference in the avpriv_h264_has_num_reorder_frames function of ffmpeg causes an immediate crash when a specially crafted H.264 media stream is processed. The crash aborts the decoding process, suspending any application that relies on ffmpeg and potentially bringing the host system offline. Based on the description, it is inferred that the vulnerability is triggered by submitting a malformed H.264 file to any ffmpeg invocation that performs decoding.

Any system that uses ffmpeg to decode H.264 media streams may be impacted. The flaw was identified in the code commit N-119856-gbe46370941, so all ffmpeg builds that include this commit or earlier releases lacking the fix are potentially affected. No definitive version boundaries are listed, so administrators should verify whether their installed ffmpeg binaries contain this commit and apply updates accordingly.

The CVSS score of 7.5 signals a high severity risk. The EPSS score is not available, indicating limited recent public exploitation data but not eliminating potential impact. The vulnerability is not listed in the CISA KEV catalog. Based on the description, it is inferred that the attack vector is delivering a maliciously crafted H.264 file to ffmpeg via any interface that accepts media input, which may be remote. Exploitation immediately terminates the ffmpeg process, causing a denial of service for the media consumer or the host system.