CVE Catalog
CVE-2026-38343
Low risk· EPSS 5%Exploitation Probability (EPSS)
Low risk0.15%
5th percentile - higher than 5% of all known CVEs
Summary
An integer overflow in the libavfilter/vf_scale.c component of FFmpeg (version N-122528-gdd2976b9e1) allows attackers to cause a Denial of Service (DoS) by supplying a crafted video file.
Risk Assessment
The risk is the potential for remote crash of video processing applications, which can disrupt services and cause system unavailability.
Recommendation
It is recommended to immediately update FFmpeg to the latest patched version and restrict processing of untrusted video files.
Original NVD description (English source)
An integer overflow in the libavfilter/vf_scale.c component of FFmpeg N-122528-gdd2976b9e1 allows attackers to cause a Denial of Service (DoS) via supplying a crafted video file.