8246 matches found
RHSA-2026:60336 Red Hat Security Advisory: RHEL AI 3.3 RPM runtime CVE fix - ffmpeg
Bulletin has no description...
RHSA-2026:60335 Red Hat Security Advisory: RHEL AI 3.5 RPM runtime CVE fix - ffmpeg
Bulletin has no description...
RHSA-2026:60334 Red Hat Security Advisory: RHEL AI 3.4 RPM runtime CVE fix - ffmpeg
Bulletin has no description...
PT-2026-82760
An integer overflow in the yuv2planeX 8 c function libswscale/output.c of FFmpeg N-122528-gdd2976b9e1 allows attackers to cause a Denial of Service DoS via supplying a crafted video file...
PT-2026-82757
An integer overflow in the libavfilter/vf scale.c component of FFmpeg N-122528-gdd2976b9e1 allows attackers to cause a Denial of Service DoS via supplying a crafted video file...
PT-2026-82761
A heap overflow in the ff sws alphablendaway function libswscale/alphablend.c of FFmpeg git-master commit 722a217 allows attackers to cause a Denial of Service DoS via a crafted input...
CVE-2026-38347
A heap overflow in the ff_sws_alphablendaway function (libswscale/alphablend.c) of FFmpeg (git-master commit 722a217) allows a remote attacker to trigger a Denial of Service by supplying a crafted input, causing the application to crash or become unresponsive. The vulnerability is scored CVSS 7.5...
CVE-2026-38345
A Division-by-Zero vulnerability in the ffswsinitsinglecontext function /libswscale/utils.c of FFmpeg N-122528-gdd2976b9e1 allows attackers to cause a Denial of Service DoS via a crafted input...
CVE-2026-38348
An integer overflow in the libswscale/utils.c component of FFmpeg N-122528-gdd2976b9e1 allows attackers to cause a Denial of Service DoS via supplying a crafted image file...
CVE-2026-38349
An integer overflow in the hScale16To19c function libswscale/output.c of FFmpeg N-122528-gdd2976b9e1 allows attackers to cause a Denial of Service DoS via supplying a crafted image file...
CVE-2026-38350
An integer overflow in the target_sws_fuzzer() function (located in libswscale/output.c ) of FFmpeg (commit N-122528-gdd2976b9e1) allows a remote attacker to trigger a Denial of Service (DoS) by supplying a specially crafted input. The Red Hat advisory notes the application can become unresponsiv...
CVE-2026-38343
CVE-2026-38343 is an integer overflow in the libavfilter/vf_scale.c component of FFmpeg (affected version N-122528-gdd2976b9e1). By supplying a crafted video file , an attacker can trigger a Denial of Service , causing the application to become unresponsive or crash (CVSS 3.1: 6.5 MEDIUM , with u...
CVE-2026-38346
An integer overflow in the yuv2planeX8c function libswscale/output.c of FFmpeg N-122528-gdd2976b9e1 allows attackers to cause a Denial of Service DoS via supplying a crafted video file...
CVE-2026-38344
A NULL pointer dereference in the getminbuffersize function /libswscale/slice.c of FFmpeg N-122528-gdd2976b9e1 allows attackers to cause a Denial of Service DoS via supplying a crafted video file...
CVE-2026-38345
A Division-by-Zero vulnerability in the ff_sws_init_single_context function (/libswscale/utils.c) of FFmpeg (affecting version N-122528-gdd2976b9e1) allows a remote attacker to cause a Denial of Service by supplying a specially crafted input, leading the application to become unresponsive or cras...
PT-2026-82763
An integer overflow in the hScale16To19 c function libswscale/output.c of FFmpeg N-122528-gdd2976b9e1 allows attackers to cause a Denial of Service DoS via supplying a crafted image file...
CVE-2026-38346
An integer overflow in the yuv2planeX_8_c() function within libswscale/output.c of FFmpeg N-122528-gdd2976b9e1 allows a remote attacker to cause a Denial of Service by supplying a specially crafted video file, leading to the application becoming unresponsive or crashing. The CVSS 3.1 score is 7.5...
CVE-2026-38344
CVE-2026-38344 is a NULL pointer dereference in the get_min_buffer_size function within /libswscale/slice.c of FFmpeg N-122528-gdd2976b9e1 . By supplying a crafted video file , an attacker can trigger a crash resulting in Denial of Service . The CNA-assigned CVSS 3.1 score is 7.5 (High) with a ve...
Division by zero
Overview Affected versions of this package are vulnerable to Division by zero via the ffswsinitsinglecontext function. An attacker can cause the application to become unresponsive or crash by providing specially crafted input. Remediation Upgrade ffmpeg to version 8.1 or higher. References -...
