CVE-2026-38350

An integer overflow in the targetswsfuzzer function libswscale/output.c of FFmpeg N-122528-gdd2976b9e1 allows attackers to cause a Denial of Service DoS via supplying a crafted input...

CVE-2026-38343

An integer overflow in the libavfilter/vfscale.c component of FFmpeg N-122528-gdd2976b9e1 allows attackers to cause a Denial of Service DoS via supplying a crafted video file...

CVE-2026-38346

An integer overflow in the yuv2planeX8c function libswscale/output.c of FFmpeg N-122528-gdd2976b9e1 allows attackers to cause a Denial of Service DoS via supplying a crafted video file...

CVE-2026-38349

An integer overflow in the hScale16To19c function libswscale/output.c of FFmpeg N-122528-gdd2976b9e1 allows attackers to cause a Denial of Service DoS via supplying a crafted image file...

PT-2026-82758

A NULL pointer dereference in the get min buffer size function /libswscale/slice.c of FFmpeg N-122528-gdd2976b9e1 allows attackers to cause a Denial of Service DoS via supplying a crafted video file...

CVE-2026-38349

FFmpeg contains an integer overflow vulnerability in the hScale16To19_c() function located within libswscale/output.c. An attacker can exploit this by providing a specially crafted image file to trigger a Denial of Service (DoS) , which may cause the application to crash or become unresponsive, t...

PT-2026-82762

An integer overflow in the libswscale/utils.c component of FFmpeg N-122528-gdd2976b9e1 allows attackers to cause a Denial of Service DoS via supplying a crafted image file...

CVE-2026-38348

FFmpeg contains an integer overflow vulnerability within the libswscale/utils.c component (specifically in version N-122528-gdd2976b9e1 ). A remote attacker can exploit this flaw by supplying a specially crafted image file to cause a Denial of Service (DoS) , potentially making the application un...

PT-2026-82764

An integer overflow in the target sws fuzzer function libswscale/output.c of FFmpeg N-122528-gdd2976b9e1 allows attackers to cause a Denial of Service DoS via supplying a crafted input...

CVE-2026-38350

An integer overflow in the targetswsfuzzer function libswscale/output.c of FFmpeg N-122528-gdd2976b9e1 allows attackers to cause a Denial of Service DoS via supplying a crafted input...

CVE-2026-38347

A heap overflow in the ffswsalphablendaway function libswscale/alphablend.c of FFmpeg git-master commit 722a217 allows attackers to cause a Denial of Service DoS via a crafted input...

CVE-2026-38343

An integer overflow in the libavfilter/vfscale.c component of FFmpeg N-122528-gdd2976b9e1 allows attackers to cause a Denial of Service DoS via supplying a crafted video file...

PT-2026-82759

A Division-by-Zero vulnerability in the ff sws init single context function /libswscale/utils.c of FFmpeg N-122528-gdd2976b9e1 allows attackers to cause a Denial of Service DoS via a crafted input...

CVE-2026-38344

A NULL pointer dereference in the getminbuffersize function /libswscale/slice.c of FFmpeg N-122528-gdd2976b9e1 allows attackers to cause a Denial of Service DoS via supplying a crafted video file...

CVE-2026-38349

An integer overflow in the hScale16To19c function libswscale/output.c of FFmpeg N-122528-gdd2976b9e1 allows attackers to cause a Denial of Service DoS via supplying a crafted image file...

CVE-2026-38347

A heap overflow in the ffswsalphablendaway function libswscale/alphablend.c of FFmpeg git-master commit 722a217 allows attackers to cause a Denial of Service DoS via a crafted input...

CVE-2026-38348

An integer overflow in the libswscale/utils.c component of FFmpeg N-122528-gdd2976b9e1 allows attackers to cause a Denial of Service DoS via supplying a crafted image file...

Out-of-bounds Write

Overview Affected versions of this package are vulnerable to Out-of-bounds Write via the ffswsalphablendaway function. An attacker can cause the application to crash or become unresponsive by supplying specially crafted input that triggers a heap overflow. Remediation Upgrade ffmpeg to version 8....

NULL Pointer Dereference

Overview Affected versions of this package are vulnerable to NULL Pointer Dereference in the getminbuffersize function when processing specially crafted video files. An attacker can cause the application to crash by supplying a maliciously crafted video file. Remediation Upgrade ffmpeg to version...

Important: Red Hat Security Advisory: RHEL AI 3.3 RPM runtime CVE fix - ffmpeg

AIPCC Security Alerts identified CVEs in the 3.3 release of base-images. The CVEs are listed with a severity level of "Important" or higher. RPM packages are internal build artifacts and not supported on their own. They are only supported as part of the Red Hat AI application platform...