CVE-2026-38346

Опубликовано: 28 авг. 2026

Источник: nvd

CVSS3: 7.5

EPSS Низкий

Описание

An integer overflow in the yuv2planeX_8_c() function (libswscale/output.c) of FFmpeg N-122528-gdd2976b9e1 allows attackers to cause a Denial of Service (DoS) via supplying a crafted video file.

Ссылки

https://code.ffmpeg.org/FFmpeg/FFmpeg/issues/21584

EPSS

Процентиль: 25%

0.00324

Низкий

7.5 High

CVSS3

Дефекты

CWE-190

Связанные уязвимости

CVE-2026-38346

CVSS3: 7.5

ubuntu

17 дней назад

An integer overflow in the yuv2planeX_8_c() function (libswscale/output.c) of FFmpeg N-122528-gdd2976b9e1 allows attackers to cause a Denial of Service (DoS) via supplying a crafted video file.

CVE-2026-38346

CVSS3: 6.5

redhat

18 дней назад

An integer overflow in the yuv2planeX_8_c() function (libswscale/output.c) of FFmpeg N-122528-gdd2976b9e1 allows attackers to cause a Denial of Service (DoS) via supplying a crafted video file.

CVE-2026-38346

CVSS3: 7.5

debian

17 дней назад

An integer overflow in the yuv2planeX_8_c() function (libswscale/outpu ...

GHSA-j7m5-vgmq-4jfw

CVSS3: 7.5

github

17 дней назад

An integer overflow in the yuv2planeX_8_c() function (libswscale/output.c) of FFmpeg N-122528-gdd2976b9e1 allows attackers to cause a Denial of Service (DoS) via supplying a crafted video file.

EPSS

Процентиль: 25%

0.00324

Низкий

7.5 High

CVSS3

Дефекты

CWE-190