CVE-2026-38350: Integer Overflow
Published Aug 27, 2026
·Updated
An integer overflow in the targetswsfuzzer() function (libswscale/output.c) of FFmpeg N-122528-gdd2976b9e1 allows attackers to cause a Denial of Service (DoS) via supplying a crafted input.
Affected Software
1 affected component
FFmpeg FFmpeg
Event History
Aug 27, 2026
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Frequently Asked Questions
1
What would an attacker need to do to trigger the denial of service?
They would need to supply a crafted input that reaches target_sws_fuzzer() in libswscale/output.c and triggers the integer overflow.
2
Which FFmpeg version is identified as affected?
The reported affected version is FFmpeg N-122528-gdd2976b9e1.
3
What is the documented impact of successful exploitation?
The documented impact is a denial of service caused by an integer overflow in target_sws_fuzzer().