CVE-2026-38345

Severity: medium (CVSS 6.5 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.4% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2026-08-28 · updated 2026-09-08
Weakness: CWE-369

Description

A Division-by-Zero vulnerability in the ff_sws_init_single_context function (/libswscale/utils.c) of FFmpeg N-122528-gdd2976b9e1 allows attackers to cause a Denial of Service (DoS) via a crafted input.

References

https://code.ffmpeg.org/FFmpeg/FFmpeg/issues/21585
https://code.ffmpeg.org/FFmpeg/FFmpeg/issues/21585

Get alerted when CVE-2026-38345 or the next vulnerability affects your stack