CVE-2026-38343

Опубликовано: 28 авг. 2026

Источник: debian

EPSS Низкий

Описание

An integer overflow in the libavfilter/vf_scale.c component of FFmpeg N-122528-gdd2976b9e1 allows attackers to cause a Denial of Service (DoS) via supplying a crafted video file.

Пакеты

Пакет	Статус	Версия исправления	Релиз	Тип
ffmpeg	fixed	7:8.1-1		package

Примечания

https://code.ffmpeg.org/FFmpeg/FFmpeg/issues/21587
https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/22369
Fixed by: https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/9adced32785ce11a5923af12d72c25c0c2907e8b (n8.1)
Fixed by: https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/90ac66848d11bb36b0f7c7b01553c4a4416945eb (n7.1.4)
Fixed by: https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/1c4b761bf7a34421e7e8ec5cf6ee8184a912a468 (n5.1.9)

EPSS

Процентиль: 5%

0.0015

Низкий

Связанные уязвимости

CVE-2026-38343

CVSS3: 5.5

redhat

18 дней назад

An integer overflow in the libavfilter/vf_scale.c component of FFmpeg N-122528-gdd2976b9e1 allows attackers to cause a Denial of Service (DoS) via supplying a crafted video file.

CVE-2026-38343

nvd

17 дней назад

An integer overflow in the libavfilter/vf_scale.c component of FFmpeg N-122528-gdd2976b9e1 allows attackers to cause a Denial of Service (DoS) via supplying a crafted video file.

GHSA-p275-5394-cxwq

CVSS3: 6.5

github

17 дней назад

An integer overflow in the libavfilter/vf_scale.c component of FFmpeg N-122528-gdd2976b9e1 allows attackers to cause a Denial of Service (DoS) via supplying a crafted video file.

EPSS

Процентиль: 5%

0.0015

Низкий