CVE Catalog
CVE-2026-38344
Low risk· EPSS 4%Exploitation Probability (EPSS)
Low risk0.15%
4th percentile - higher than 4% of all known CVEs
Summary
A NULL pointer dereference in the get_min_buffer_size function (/libswscale/slice.c) of FFmpeg N-122528-gdd2976b9e1 allows attackers to cause a Denial of Service (DoS) via supplying a crafted video file.
Risk Assessment
An attacker can cause a crash of the application or service using FFmpeg, leading to service unavailability.
Recommendation
Update FFmpeg to the latest version that includes fixes for this type of vulnerability, and avoid processing untrusted video files.
Original NVD description (English source)
A NULL pointer dereference in the get_min_buffer_size function (/libswscale/slice.c) of FFmpeg N-122528-gdd2976b9e1 allows attackers to cause a Denial of Service (DoS) via supplying a crafted video file.