The vulnerability is a heap overflow in the ff_sws_alphablendaway function of FFmpeg's libswscale component. A crafted input can cause an out‑of‑bounds write that crashes the process, leading to a denial of service. The flaw is a classic heap‑based buffer overflow, affecting availability but not confidentiality or integrity.

The vulnerability affects the FFmpeg project, specifically the libswscale module referenced by commit 722a217. No vendor or version details are provided, so any build that contains this commit or earlier unpatched releases is considered vulnerable.

The exploitation requires providing a maliciously crafted media stream or file to the FFmpeg instance. The risk of exploitation is uncertain due to the lack of CVSS and EPSS data, and the vulnerability is not listed in the CISA KEV catalog. If an attacker can transmit such input to a publicly exposed FFmpeg process, the impact is a local or remote denial of service, with a likely low probability of widespread usage given the specialized nature of the attack vector.