Linux/Unix 主機上安裝了一個或多個受到弱點影響的套件，且廠商未提供可用的修補程式。

  - FFmpeg N-122528-gdd2976b9e1 的 ff_sws_init_single_context 函式 （/libswscale/utils.c） 中的除以零弱點允許攻擊者透過特製的輸入造成拒絕服務 （DoS）。
    (CVE-2026-38345)

請注意，Nessus 依賴供應商報告的套件存在。

Linux/Unix 主机中安装的一个或多个程序包受到一个漏洞影响，而供应商没有提供补丁程序。

  - FFmpeg N-122528-gdd2976b9e1 的 ff_sws_init_single_context 函数 （/libswscale/utils.c） 中存在除零漏洞，允许攻击者通过特制的输入造成拒绝服务 （DoS）。
    (CVE-2026-38345)

请注意，Nessus 依赖供应商报告的程序包是否存在进行判断。

Linux/Unix ホストには、ベンダーが提供するパッチが利用できない脆弱性の影響を受ける複数のパッケージがインストールされています。

  - FFmpeg N-122528-gdd2976b9e1 の ff_sws_init_single_context 関数(/libswscale/utils.c)でのゼロ除算の脆弱性により、攻撃者は、細工された入力を通じて、サービス拒否(DoS)を引き起こすことが可能です。
    (CVE-2026-38345)

Nessus は、ベンダーによって報告されたパッケージの存在に依存していることに注意してください。

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - A Division-by-Zero vulnerability in the ff_sws_init_single_context function (/libswscale/utils.c) of     FFmpeg N-122528-gdd2976b9e1 allows attackers to cause a Denial of Service (DoS) via a crafted input.
    (CVE-2026-38345)

Note that Nessus relies on the presence of the package as reported by the vendor.

The remote SUSE Linux SLED15 / SLED_SAP15 / SLES15 / SLES_SAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:5220-1 advisory.

    - CVE-2023-6602: HLS Force TTY Demuxer (bsc#1220546).
    - CVE-2023-6604: HLS XBIN Demuxer DoS Amplification (bsc#1220549).
    - CVE-2024-35367: FFmpeg n6.1.1 has an Out-of-bounds Read via libavcodec/ppc/vp8dsp_altivec.c, static     const vec_s8       h_subpel_filters_outer (bsc#1234029).
    - CVE-2026-18393: Heap buffer overflow in tdsc_load_cursor() via CUR_FMT_MONO cursor (bsc#1277377).
    - CVE-2026-38344: A NULL pointer dereference in the get_min_buffer_size function (/libswscale/slice.c) of     FFmpeg       N-122528-gdd2976b9e1 allows attackers to cause a Denial of Service (DoS) via supplying a crafted video     file       (bsc#1277309).
    - CVE-2026-38345: FFmpeg: Denial of Service via division-by-zero vulnerability in     `ff_sws_init_single_context` function       (bsc#1277376).
    - CVE-2026-38346: FFmpeg: Denial of Service via crafted video file due to integer overflow (bsc#1277375).
    - CVE-2026-38347: FFmpeg: Heap overflow vulnerability leads to Denial of Service (bsc#1277373).
    - CVE-2026-38348: FFmpeg: Denial of Service via crafted image file due to integer overflow (bsc#1277368).
    - CVE-2026-38349: FFmpeg: Denial of Service via crafted image file due to integer overflow (bsc#1277369).
    - CVE-2026-38350: FFmpeg: Integer overflow leads to Denial of Service (bsc#1277370).
    - CVE-2026-52296: out-of-bounds read due to missing required padding in WMA extradata allocation paths     (bsc#1280752).
    - CVE-2026-65705: vf_floodfill Out-of-Bounds Write via filter_frame() (bsc#1272761).
    - CVE-2026-66036: Heap Out-of-Bounds Write in vf_hqdn3d Filter (bsc#1272763).
    - CVE-2026-70628: signed integer underflows during subtitle buffer checks can cause heap buffer overflows     (bsc#1274268).
    - CVE-2026-70629: unvalidated decompressed frame sizes in video decoders can cause uninitialized heap     memory reads       (bsc#1274270).
    - CVE-2026-70630: unvalidated decompression sizes in Screenpresso frame decoding can cause uninitialized     heap memory       reads (bsc#1274282).
    - CVE-2026-70631: unvalidated decompression sizes in TIFF strip decoding can cause uninitialized heap     memory reads       (bsc#1274287).
    - CVE-2026-70632: unenforced frame dimensions in CineForm HD decoding can cause heap-based out-of-bounds     writes       (bsc#1274289).
    - CVE-2026-75141: heap buffer overflow in the hvcC box writer (bsc#1276407).
    - CVE-2026-75142: stack buffer overflow in the MPEG-PS muxer (bsc#1276408).
    - CVE-2026-75144: heap buffer overflow in the VC-2/Dirac RTP packetizer (bsc#1276410).
    - CVE-2026-75146: out-of-bounds read in the DASH demuxer (bsc#1276412).
    - CVE-2026-90815: out-of-bounds read in the convolution video filter when processing videos with     dimensions smaller than       the convolution kernel size (bsc#1280754).
    - CVE-2026-90816: CPU exhaustion due to missing validations in the `parse_playlist()` function when     processing a crafted       HLS playlist (bsc#1280755).

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	名稱	產品	系列	已發布	已更新	嚴重性
342010	Linux Distros 未修補弱點：CVE-2026-38345	Nessus	Misc.	2026/8/31	2026/11/11	medium
342010	Linux Distros 未修补的漏洞：CVE-2026-38345	Nessus	Misc.	2026/8/31	2026/11/11	medium
342010	Linux Distros のパッチ未適用の脆弱性: CVE-2026-38345	Nessus	Misc.	2026/8/31	2026/11/11	medium
342010	Linux Distros Unpatched Vulnerability : CVE-2026-38345	Nessus	Misc.	2026/8/31	2026/11/11	medium
380997	SUSE SLED15: ffmpeg / libavcodec-devel / libavcodec57 / libavdevice57 / etc (SUSE-SU-2026:5220-1)	Nessus	SuSE Local Security Checks	2026/11/14	2026/11/14	high

偵測

搜尋 Plugin

medium

medium

medium

medium

high