FF
Product
ffmpeg
35
CVEs
0
On KEV
8.8
Max CVSS
0
New 30D
Severity mix
Critical 0High 11Medium 24Low 0
Watch
Add ffmpeg to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2025-1373 | 5.5 | Feb 17 | FFmpeg MOV Parser mov.c mov_read_trak null pointer dereference Affected: 7.0; 7.1 |
| CVE-2014-125025 | 5.5 | Jun 19 | FFmpeg decode_pulses memory corruption Affected: 2.0 |
| CVE-2014-125023 | 5.5 | Jun 19 | FFmpeg Truemotion1 truemotion1_decode_header memory corruption Affected: 2.0 |
| CVE-2014-125022 | 5.5 | Jun 19 | FFmpeg Bitstream Buffer shorten_decode_frame memory corruption Affected: 2.0 |
| CVE-2014-125021 | 5.5 | Jun 19 | FFmpeg cmv_process_header memory corruption Affected: 2.0 |
| CVE-2014-125019 | 5.5 | Jun 19 | FFmpeg Slice Segment decode_nal_unit memory corruption Affected: 2.0 |
| CVE-2014-125018 | 5.5 | Jun 19 | FFmpeg decode_slice_header memory corruption Affected: 2.0 |
| CVE-2014-125016 | 5.5 | Jun 18 | FFmpeg utils.c ff_init_buffer_info memory corruption Affected: 2.0 |
| CVE-2014-125014 | 5.5 | Jun 18 | FFmpeg HEVC Video Decoder memory corruption Affected: 2.0 |
| CVE-2014-125013 | 5.5 | Jun 18 | FFmpeg msrle.c msrle_decode_frame memory corruption Affected: 2.0 |
| CVE-2014-125012 | 5.5 | Jun 18 | FFmpeg dxtroy.c integer coercion Affected: 2.0 |
| CVE-2014-125010 | 5.5 | Jun 18 | FFmpeg h64.c decode_slice_header memory corruption Affected: 2.0 |
| CVE-2014-125009 | 5.5 | Jun 18 | FFmpeg snow.h add_yblock memory corruption Affected: 2.0 |
| CVE-2014-125008 | 5.5 | Jun 18 | FFmpeg oggparsevorbis.c vorbis_header memory corruption Affected: 2.0 |
| CVE-2014-125007 | 5.5 | Jun 18 | FFmpeg hevcpred_template.c intra_pred memory corruption Affected: 2.0 |
| CVE-2014-125006 | 5.5 | Jun 18 | FFmpeg h264.c output_frame memory corruption Affected: 2.0 |
| CVE-2014-125005 | 5.5 | Jun 18 | FFmpeg mpeg4videodec.c decode_vol_header memory corruption Affected: 2.0 |
| CVE-2014-125004 | 5.5 | Jun 18 | FFmpeg vmnc.c decode_hextile memory corruption Affected: 2.0 |
| CVE-2014-125003 | 5.5 | Jun 18 | FFmpeg jpeg2000dec.c get_siz memory corruption Affected: 2.0 |
| CVE-2014-125002 | 5.5 | Jun 18 | FFmpeg dnxhdenc.c dnxhd_init_rc memory corruption Affected: 2.0 |
| CVE-2022-1475 | 5.5 | May 2 | An integer overflow vulnerability was found in FFmpeg versions before 4.4.2 and before 5.0.1 in g729_parse() in llibavcodec/g729_parser.c when processing a specially crafted file Affected: before 4.4.2; before 5.0.1 |
| CVE-2021-3566 | 5.5 | Aug 5 | Prior to ffmpeg version 4.3, the tty demuxer did not have a 'read_probe' function assigned to it Affected: ffmpeg 4.3 |
| CVE-2022-3341 | 5.3 | Jan 12 | A null pointer dereference issue was discovered in 'FFmpeg' in decode_main_header() function of libavformat/nutdec.c file Affected: Fixed-in ffmpeg 5.1 |
| CVE-2025-1816 | 4.3 | Mar 2 | FFmpeg IAMF File iamf_parse.c audio_element_obu memory leak Affected: 6e26f57f672b05e7b8b052007a83aef99dc81ccb |
Showing 24