CVE-2026-38347

Name of the Vulnerable Software and Affected Versions FFmpeg git-master commit 722a217

Description A heap overflow occurs in the ff sws alphablendaway() function within the libswscale/alphablend.c component. This issue allows an attacker to trigger a Denial of Service (DoS) by providing a specially crafted input. A heap overflow is a memory corruption error that happens when a program writes more data to a heap-allocated memory block than it can hold.

Recommendations As a temporary workaround, consider restricting the use of the ff sws alphablendaway() function until a patch is available.