CVE Catalog
CVE-2026-38347
Low risk· EPSS 5%Exploitation Probability (EPSS)
Low risk0.15%
5th percentile - higher than 5% of all known CVEs
Summary
A heap overflow in the ff_sws_alphablendaway function (libswscale/alphablend.c) of FFmpeg git-master commit 722a217 allows attackers to cause a Denial of Service (DoS) via a crafted input.
Risk Assessment
An attacker can cause a crash of the application or service using FFmpeg, leading to service unavailability.
Recommendation
Update FFmpeg to the latest version that includes fixes for this type of vulnerability, and avoid processing untrusted data.
Original NVD description (English source)
A heap overflow in the ff_sws_alphablendaway function (libswscale/alphablend.c) of FFmpeg git-master commit 722a217 allows attackers to cause a Denial of Service (DoS) via a crafted input.