FFmpeg Division-by-Zero DoS via crafted input in swscale/utils.c
CVE-2026-38345 Published on August 27, 2026
A Division-by-Zero vulnerability in the ff_sws_init_single_context function (/libswscale/utils.c) of FFmpeg N-122528-gdd2976b9e1 allows attackers to cause a Denial of Service (DoS) via a crafted input.
Vulnerability Analysis
CVE-2026-38345 can be exploited with network access, requires user interaction. This vulnerability is considered to have a low attack complexity. Public availability of a proof of concept (POC) exploit exists for CVE-2026-38345. The potential impact of an exploit of this vulnerability is considered to have no impact on confidentiality and integrity, and a high impact on availability.
Weakness Type
Divide By Zero
The product divides a value by zero. This weakness typically occurs when an unexpected value is provided to the product, or if an error occurs that is not properly detected. It frequently occurs in calculations involving physical dimensions such as size, length, width, and height.
Products Associated with CVE-2026-38345
Want to know whenever a new CVE is published for FFmpeg? stack.watch will email you.
