DeutschShown in its original language — a full translation is planned for a future version.
ffmpeg: Mehrere Schwachstellen ermöglichen Denial of Service
view advisory published 2026-08-27
Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in ffmpeg ausnutzen, um einen Denial of Service Angriff durchzuführen.
01
describes (8)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2026-38350US | — | — | ||
An integer overflow in the target_sws_fuzzer() function (libswscale/output.c) of FFmpeg N-122528-gdd2976b9e1 allows attackers to cause a Denial of Service (DoS) via supplying a cra… | ||||
| CVE-2026-38349US | — | — | ||
An integer overflow in the hScale16To19_c() function (libswscale/output.c) of FFmpeg N-122528-gdd2976b9e1 allows attackers to cause a Denial of Service (DoS) via supplying a crafte… | ||||
| CVE-2026-38348US | — | — | ||
An integer overflow in the libswscale/utils.c component of FFmpeg N-122528-gdd2976b9e1 allows attackers to cause a Denial of Service (DoS) via supplying a crafted image file. | ||||
| CVE-2026-38347US | — | — | ||
A heap overflow in the ff_sws_alphablendaway function (libswscale/alphablend.c) of FFmpeg git-master commit 722a217 allows attackers to cause a Denial of Service (DoS) via a crafte… | ||||
| CVE-2026-38346US | — | — | ||
An integer overflow in the yuv2planeX_8_c() function (libswscale/output.c) of FFmpeg N-122528-gdd2976b9e1 allows attackers to cause a Denial of Service (DoS) via supplying a crafte… | ||||
| CVE-2026-38345US | — | — | ||
A Division-by-Zero vulnerability in the ff_sws_init_single_context function (/libswscale/utils.c) of FFmpeg N-122528-gdd2976b9e1 allows attackers to cause a Denial of Service (DoS)… | ||||
| CVE-2026-38344US | — | — | ||
A NULL pointer dereference in the get_min_buffer_size function (/libswscale/slice.c) of FFmpeg N-122528-gdd2976b9e1 allows attackers to cause a Denial of Service (DoS) via supplyin… | ||||
| CVE-2026-38343US | — | — | ||
An integer overflow in the libavfilter/vf_scale.c component of FFmpeg N-122528-gdd2976b9e1 allows attackers to cause a Denial of Service (DoS) via supplying a crafted video file. | ||||
02
references
External citations — patches, advisories, analysis.
- FFmpeg Commit 1e63151355342228584e30dab2c53a2cb0d19b42 vom 2026-08-27external
- FFmpeg Commit 946ce12e1c36e0cbfca2145ec66dcbc28350de38 vom 2026-08-27external
- FFmpeg Commit 9adced32785ce11a5923af12d72c25c0c2907e8b vom 2026-08-27external
- FFmpeg Commit a59180022af5447d8b2847f539fb99c859175e95 vom 2026-08-27external
- FFmpeg Commit dc9bf66796b7c1f4329f127736ddf3258e5ba206 vom 2026-08-27external
- FFmpeg Issue 21583 vom 2026-08-27external
- FFmpeg Issue 21584 vom 2026-08-27external
- FFmpeg Issue 21585 vom 2026-08-27external
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan