FF
Product
ffmpeg
34
CVEs
0
On KEV
8.8
Max CVSS
0
New 30D
Severity mix
Critical 0High 11Medium 23Low 0
Watch
Add ffmpeg to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2025-1594 | 8.8 | Feb 23 | FFmpeg AAC Encoder aacenc_tns.c ff_aac_search_for_tns stack-based overflow Affected: 3.4.0; 3.4.1; 3.4.2; 3.4.3; 3.4.4; 3.4.5; +34 more |
| CVE-2024-7272 | 8.8 | Aug 8 | FFmpeg swresample.c fill_audiodata heap-based overflow Affected: 5.1.0; 5.1.1; 5.1.2; 5.1.3; 5.1.4; 5.1.5 |
| CVE-2024-7055 | 8.8 | Aug 6 | FFmpeg pnmdec.c pnm_decode_frame heap-based overflow Affected: 7.0.0; 7.0.1 |
| CVE-2022-3964 | 8.1 | Nov 13 | ffmpeg QuickTime RPZA Video Encoder rpzaenc.c out-of-bounds Affected: All versions, or not specified |
| CVE-2022-3965 | 8.1 | Nov 13 | ffmpeg QuickTime Graphics Video Encoder smcenc.c smc_encode_stream out-of-bounds Affected: All versions, or not specified |
| CVE-2014-125024 | 7.8 | Jun 19 | FFmpeg lag_decode_frame memory corruption Affected: 2.0 |
| CVE-2014-125020 | 7.8 | Jun 19 | FFmpeg decode_update_thread_context memory corruption Affected: 2.0 |
| CVE-2014-125017 | 7.8 | Jun 18 | FFmpeg rpza_decode_stream memory corruption Affected: 2.0 |
| CVE-2014-125015 | 7.8 | Jun 18 | FFmpeg read_var_block_data memory corruption Affected: 2.0 |
| CVE-2014-125011 | 7.8 | Jun 18 | FFmpeg ansi.c decode_frame integer coercion Affected: 2.0 |
| CVE-2022-3109 | 7.5 | Dec 16 | An issue was discovered in the FFmpeg package, where vp3_decode_frame in libavcodec/vp3.c lacks check of the return value of av_malloc() and will cause a null pointer dereference,… Affected: FFmpeg 5.1 |
Showing 11