CVE-2026-38350: n/a

This vulnerability is an integer overflow in the target_sws_fuzzer() function within libswscale/output.c of FFmpeg (commit N-122528-gdd2976b9e1). An attacker can supply crafted input to trigger this overflow, causing a denial of service condition. The CVSS v3.1 score is 7.5, indicating high severity, with network attack vector, low attack complexity, no privileges required, no user interaction, and impact limited to availability (DoS). There is no known exploit in the wild and no vendor advisory or patch information provided at this time.

Successful exploitation results in denial of service by crashing or destabilizing the FFmpeg process handling the crafted input. There is no reported impact on confidentiality or integrity.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, consider restricting or sanitizing inputs processed by the vulnerable FFmpeg component to reduce exposure.