CVE-2026-38348

Опубликовано: 28 авг. 2026

Источник: nvd

CVSS3: 7.5

EPSS Низкий

Описание

An integer overflow in the libswscale/utils.c component of FFmpeg N-122528-gdd2976b9e1 allows attackers to cause a Denial of Service (DoS) via supplying a crafted image file.

Ссылки

https://code.ffmpeg.org/FFmpeg/FFmpeg/issues/21588

EPSS

Процентиль: 25%

0.00324

Низкий

7.5 High

CVSS3

Дефекты

CWE-190

Связанные уязвимости

CVE-2026-38348

CVSS3: 7.5

ubuntu

17 дней назад

An integer overflow in the libswscale/utils.c component of FFmpeg N-122528-gdd2976b9e1 allows attackers to cause a Denial of Service (DoS) via supplying a crafted image file.

CVE-2026-38348

CVSS3: 5.5

redhat

18 дней назад

An integer overflow in the libswscale/utils.c component of FFmpeg N-122528-gdd2976b9e1 allows attackers to cause a Denial of Service (DoS) via supplying a crafted image file.

CVE-2026-38348

CVSS3: 7.5

debian

17 дней назад

An integer overflow in the libswscale/utils.c component of FFmpeg N-12 ...

GHSA-f99v-5v4x-h48m

CVSS3: 7.5

github

17 дней назад

An integer overflow in the libswscale/utils.c component of FFmpeg N-122528-gdd2976b9e1 allows attackers to cause a Denial of Service (DoS) via supplying a crafted image file.

EPSS

Процентиль: 25%

0.00324

Низкий

7.5 High

CVSS3

Дефекты

CWE-190