CVE Catalog
CVE-2026-38345
Low risk· EPSS 4%Exploitation Probability (EPSS)
Low risk0.15%
4th percentile - higher than 4% of all known CVEs
Summary
A Division-by-Zero vulnerability in the ff_sws_init_single_context function (/libswscale/utils.c) of FFmpeg N-122528-gdd2976b9e1 allows attackers to cause a Denial of Service (DoS) via a crafted input.
Risk Assessment
An attacker can cause a crash of the application or service using FFmpeg, leading to service unavailability.
Recommendation
Update FFmpeg to the latest version that includes fixes for this type of vulnerability, and avoid processing untrusted data.
Original NVD description (English source)
A Division-by-Zero vulnerability in the ff_sws_init_single_context function (/libswscale/utils.c) of FFmpeg N-122528-gdd2976b9e1 allows attackers to cause a Denial of Service (DoS) via a crafted input.