CVE-2026-38349

Опубликовано: 28 авг. 2026

Источник: debian

Описание

An integer overflow in the hScale16To19_c() function (libswscale/output.c) of FFmpeg N-122528-gdd2976b9e1 allows attackers to cause a Denial of Service (DoS) via supplying a crafted image file.

Пакеты

Пакет	Статус	Версия исправления	Релиз	Тип
ffmpeg	fixed	7:8.1-1		package

Примечания

https://code.ffmpeg.org/FFmpeg/FFmpeg/issues/21592
https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/22369
Fixed by: https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/1e63151355342228584e30dab2c53a2cb0d19b42 (n8.1)
Fixed by: https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/5f9cdf11fc49e41b7a99e2c3f009ef046a9a02d2 (n7.1.4)
Fixed by: https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/4425208158170180b0a574c8161247404445b45b (n5.1.9)

Связанные уязвимости

CVE-2026-38349

CVSS3: 7.5

ubuntu

17 дней назад

An integer overflow in the hScale16To19_c() function (libswscale/output.c) of FFmpeg N-122528-gdd2976b9e1 allows attackers to cause a Denial of Service (DoS) via supplying a crafted image file.

CVE-2026-38349

CVSS3: 7.5

redhat

18 дней назад

An integer overflow in the hScale16To19_c() function (libswscale/output.c) of FFmpeg N-122528-gdd2976b9e1 allows attackers to cause a Denial of Service (DoS) via supplying a crafted image file.

CVE-2026-38349

CVSS3: 7.5

nvd

17 дней назад

An integer overflow in the hScale16To19_c() function (libswscale/output.c) of FFmpeg N-122528-gdd2976b9e1 allows attackers to cause a Denial of Service (DoS) via supplying a crafted image file.

GHSA-4f39-h9cc-q7g2

CVSS3: 7.5

github

17 дней назад

An integer overflow in the hScale16To19_c() function (libswscale/output.c) of FFmpeg N-122528-gdd2976b9e1 allows attackers to cause a Denial of Service (DoS) via supplying a crafted image file.