CVE-2026-38343
Awaiting Analysis Awaiting Analysis - Queue

Integer Overflow in FFmpeg Leading to Denial of Service

Publication date: 2026-08-28

Last updated on: 2026-09-09

Assigner: MITRE

Description
An integer overflow in the libavfilter/vf_scale.c component of FFmpeg N-122528-gdd2976b9e1 allows attackers to cause a Denial of Service (DoS) via supplying a crafted video file.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-08-28
Last Modified
2026-09-09
Generated
2026-09-17
AI Q&A
2026-08-28
EPSS Evaluated
2026-09-15
NVD
CVE-2026-38343
EUVD
EUVD-2026-67325

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
ffmpeg ffmpeg *

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-190 The product performs a calculation that can produce an integer overflow or wraparound when the logic assumes that the resulting value will always be larger than the original value. This occurs when an integer value is incremented to a value that is too large to store in the associated representation. When this occurs, the value may become a very small or negative number.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability is an integer overflow in the libavfilter/vf_scale.c component of FFmpeg version N-122528-gdd2976b9e1. An integer overflow occurs when a calculation exceeds the maximum value an integer can hold, causing unexpected behavior. In this case, it can lead to a Denial of Service (DoS) when a specially crafted video file is processed.

Impact Analysis

The vulnerability allows attackers to cause a Denial of Service by supplying a malicious video file. This could crash the FFmpeg application or the system processing the file, disrupting normal operations and potentially leading to service unavailability.

Compliance Impact

This vulnerability does not directly affect compliance with standards like GDPR or HIPAA as it is a Denial of Service issue in FFmpeg's libavfilter component. Compliance impacts would depend on how the vulnerability is exploited in a system handling regulated data.

Mitigation Strategies

Update FFmpeg to a patched version that fixes the integer overflow in libavfilter/vf_scale.c. Avoid processing untrusted video files until the update is applied.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-38343. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart