PT-2026-83048

Name of the Vulnerable Software and Affected Versions FFmpeg affected versions not specified Description A flaw exists in the tdsc load cursor function that allows writing beyond the bounds of a heap-allocated buffer when processing crafted TDSC cursor data. A remote attacker can exploit this by...

ROOT-OS-DEBIAN-12-CVE-2025-22921 CVE-2025-22921 in ffmpeg - Patched by Root

Root has patched CVE-2025-22921 in the ffmpeg package for Root:Debian:12. Multiple fixed versions available...

ROOT-OS-DEBIAN-12-CVE-2023-49528 CVE-2023-49528 in ffmpeg - Patched by Root

Root has patched CVE-2023-49528 in the ffmpeg package for Root:Debian:12. Multiple fixed versions available...

ROOT-OS-DEBIAN-12-CVE-2024-31578 CVE-2024-31578 in ffmpeg - Patched by Root

Root has patched CVE-2024-31578 in the ffmpeg package for Root:Debian:12. Multiple fixed versions available...

RHSA-2026:60336 Red Hat Security Advisory: RHEL AI 3.3 RPM runtime CVE fix - ffmpeg

Bulletin has no description...

RHSA-2026:60335 Red Hat Security Advisory: RHEL AI 3.5 RPM runtime CVE fix - ffmpeg

Bulletin has no description...

RHSA-2026:60334 Red Hat Security Advisory: RHEL AI 3.4 RPM runtime CVE fix - ffmpeg

Bulletin has no description...

CVE-2026-38343

FFmpeg contains an integer overflow vulnerability in the libavfilter/vf_scale.c component (specifically in version N-122528-gdd2976b9e1 ). An attacker can exploit this by providing a specially crafted video file , which leads to a Denial of Service (DoS) by causing the application to become unres...

CVE-2026-38347

A heap overflow vulnerability exists in the ff_sws_alphablendaway function (located in libswscale/alphablend.c) of FFmpeg (git-master commit 722a217). Attackers can exploit this flaw by providing a specially crafted input to trigger a Denial of Service (DoS) , which may cause the application to b...

CVE-2026-38344

A NULL pointer dereference vulnerability exists in the get_min_buffer_size function (located in /libswscale/slice.c) of FFmpeg (specifically version N-122528-gdd2976b9e1). An attacker can exploit this flaw by providing a specially crafted video file to trigger a Denial of Service (DoS) , which pr...

CVE-2026-38348

FFmpeg contains an integer overflow vulnerability within the libswscale/utils.c component (specifically in version N-122528-gdd2976b9e1 ). A remote attacker can exploit this flaw by supplying a specially crafted image file to cause a Denial of Service (DoS) , potentially making the application un...

CVE-2026-38349

FFmpeg contains an integer overflow vulnerability in the hScale16To19_c() function located within libswscale/output.c. An attacker can exploit this by providing a specially crafted image file to trigger a Denial of Service (DoS) , which may cause the application to crash or become unresponsive, t...

CVE-2026-38345

A Division-by-Zero vulnerability in the ffswsinitsinglecontext function /libswscale/utils.c of FFmpeg N-122528-gdd2976b9e1 allows attackers to cause a Denial of Service DoS via a crafted input...

CVE-2026-38344

A NULL pointer dereference in the getminbuffersize function /libswscale/slice.c of FFmpeg N-122528-gdd2976b9e1 allows attackers to cause a Denial of Service DoS via supplying a crafted video file...

PT-2026-82759

Name of the Vulnerable Software and Affected Versions FFmpeg version N-122528-gdd2976b9e1 Description A Division-by-Zero issue exists in the ff sws init single context function located in /libswscale/utils.c. This flaw allows an attacker to trigger a Denial of Service DoS by providing a specially...

CVE-2026-38349

An integer overflow in the hScale16To19c function libswscale/output.c of FFmpeg N-122528-gdd2976b9e1 allows attackers to cause a Denial of Service DoS via supplying a crafted image file...

CVE-2026-38345

A Division-by-Zero vulnerability in the ffswsinitsinglecontext function /libswscale/utils.c of FFmpeg N-122528-gdd2976b9e1 allows attackers to cause a Denial of Service DoS via a crafted input...

CVE-2026-38347

A heap overflow in the ffswsalphablendaway function libswscale/alphablend.c of FFmpeg git-master commit 722a217 allows attackers to cause a Denial of Service DoS via a crafted input...

CVE-2026-38350

FFmpeg version N-122528-gdd2976b9e1 is vulnerable to an integer overflow in the target_sws_fuzzer() function located in libswscale/output.c. A remote attacker can exploit this flaw by providing a specially crafted input to trigger a Denial of Service (DoS) , potentially causing the application to...

CVE-2026-38344

A NULL pointer dereference in the getminbuffersize function /libswscale/slice.c of FFmpeg N-122528-gdd2976b9e1 allows attackers to cause a Denial of Service DoS via supplying a crafted video file...