CVE-2026-38350

Опубликовано: 28 авг. 2026

Источник: debian

Описание

An integer overflow in the target_sws_fuzzer() function (libswscale/output.c) of FFmpeg N-122528-gdd2976b9e1 allows attackers to cause a Denial of Service (DoS) via supplying a crafted input.

Пакеты

Пакет	Статус	Версия исправления	Релиз	Тип
ffmpeg	fixed	7:8.0.1-2		package
ffmpeg	postponed		trixie	package

Примечания

https://trac.ffmpeg.org/ticket/11686
https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/20060
Fixed by: https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/aca41d3d9327be4d6ab036f494b700118fcc04e1 (n8.0)

Связанные уязвимости

CVE-2026-38350

CVSS3: 7.5

ubuntu

17 дней назад

An integer overflow in the target_sws_fuzzer() function (libswscale/output.c) of FFmpeg N-122528-gdd2976b9e1 allows attackers to cause a Denial of Service (DoS) via supplying a crafted input.

CVE-2026-38350

CVSS3: 5.5

redhat

18 дней назад

An integer overflow in the target_sws_fuzzer() function (libswscale/output.c) of FFmpeg N-122528-gdd2976b9e1 allows attackers to cause a Denial of Service (DoS) via supplying a crafted input.

CVE-2026-38350

CVSS3: 7.5

nvd

17 дней назад

An integer overflow in the target_sws_fuzzer() function (libswscale/output.c) of FFmpeg N-122528-gdd2976b9e1 allows attackers to cause a Denial of Service (DoS) via supplying a crafted input.

GHSA-5mvf-7pmf-w2w4

CVSS3: 7.5

github

17 дней назад

An integer overflow in the target_sws_fuzzer() function (libswscale/output.c) of FFmpeg N-122528-gdd2976b9e1 allows attackers to cause a Denial of Service (DoS) via supplying a crafted input.